[j-nsp] JUNOS and 128.0.0.0 martian (JFYI)
Tima Maryin
timamaryin at mail.ru
Mon Oct 10 08:39:45 EDT 2011
Hello!
Recently RIPE NCC started to allocate addresses from 128/8 to end users,
example:
https://apps.db.ripe.net/whois/lookup/ripe/inetnum/128.0.0.0-128.0.7.255.html
Junos software (upto and including 11.1) blocks those address by default:
> show route martians
inet.0:
0.0.0.0/0 exact -- allowed
0.0.0.0/8 orlonger -- disallowed
127.0.0.0/8 orlonger -- disallowed
128.0.0.0/16 orlonger -- disallowed
In fact there will be no connectivity for new addresses and Juniper
routers all around the world unless people change de.fault behavior or
juniper change default settings for martians
I think it's time to do, I've just open JTAC case about it.
p.s. set routing-options martians 128.0.0.0/16 orlonger allow
fixes it.
More information about the juniper-nsp
mailing list