[j-nsp] AS-PAth Prepend and Loop Command
Leigh Porter
leigh.porter at ukbroadband.com
Mon Jan 7 11:29:26 EST 2008
You should not tell us who they are to embarrass them :)
--
Leigh
NAIDOO Kesva ROSI/I-BNF wrote:
> If this is a way of securing BGP updates then it is not a good solution.
> If your neighbor, EBGP peer is prepending your AS in their updates then
> they do not want you to know about their advertised networks. Why not do
> this with a well know community, like no-export.
>
> I think that this EBGP peer is behaving abnormally and I agree with the
> other posts.
>
> Kesva
>
>
>
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Chris Morrow
> Sent: Monday, January 07, 2008 9:31 AM
> To: Leigh Porter
> Cc: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] AS-PAth Prepend and Loop Command
>
>
>
> On Mon, 7 Jan 2008, Leigh Porter wrote:
>
>
>> Here here.. Who's idea was that?
>>
>>
>
> perhaps someone doesn't want the other end talking to them? This I've
> seen
> used as a security measure at times: "AS1 is really bad, they have a
> giant route list I can't filter that how about I just don't accept their
>
> routes? Oh, I could do that by prepending their AS on my announcements,
> done!"
>
>
>> Scott Morris wrote:
>>
>>>> From a technical standpoint, yes. BGP sees a loop whenever it sees
>>>>
> its own
>
>>> AS in the path.
>>>
>>>
>>>> From a political/personal standpoint, you need to reach out and
>>>>
> smack the
>
>>> brainchild that is prepending YOUR AS into their BGP records. It
>>>
> would
>
> they might be doing it for a reason they feel is valid (see above)
>
>
>>> serve them right to not be reached.
>>>
>
> that might be their intent...
>
>
>>> Just my thoughts.
>>>
>>> Scott
>>>
>>>
>>> -----Original Message-----
>>> From: juniper-nsp-bounces at puck.nether.net
>>> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Reza
>>>
> Sharifi
>
>>> Sent: Sunday, January 06, 2008 5:12 PM
>>> To: juniper-nsp at puck.nether.net
>>> Subject: [j-nsp] AS-PAth Prepend and Loop Command
>>>
>>> Hi All,
>>>
>>> If I have an external BGP connection to my neighbor, and if the
>>>
> neighbor is
>
>>> Prepending my own AS to the routes that is sending to me, do I need
>>>
> to
>
>>> implement the command " set routing-options autonomous-system loop to
>>>
> all of
>
>>> my internal routers inside my AS in order to get those routes?
>>> So far, the only way I have been able to get the routes to all my
>>>
> internal
>
>>> routers is by applying the loop command, and do a clear BGP neighbor
>>> soft-inbound I am running JUNOS 7.3R3.6, Is there any other way of
>>> implementing this?
>>>
>>> Thanks,
>>> Reza
>>> _________________________________________________________________
>>> Share life as it happens with the new Windows Live.
>>>
>>>
> http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_012
> 008
>
>>> _______________________________________________
>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>>
>>> _______________________________________________
>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>>
>>>
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
> *********************************
> This message and any attachments (the "message") are confidential and intended solely for the addressees.
> Any unauthorised use or dissemination is prohibited.
> Messages are susceptible to alteration.
> France Telecom Group shall not be liable for the message if altered, changed or falsified.
> If you are not the intended addressee of this message, please cancel it immediately and inform the sender.
> ********************************
>
More information about the juniper-nsp
mailing list