[sdnog] filtering traffic on BGP

Bernd Spiess bernd.spiess at de-cix.net
Fri Mar 4 11:09:25 SAST 2016


Hi

 

Maybe my attached summary gives some help on this?

 

If you are interested in some cisco sample config (matching this) too, just
let me know


 

Bernd

 

Von: sdnog-bounces at sdnog.sd [mailto:sdnog-bounces at sdnog.sd] Im Auftrag von
Manhal Mohammed
Gesendet: Dienstag, 1. März 2016 09:57
An: sdnog at sdnog.sd
Betreff: [sdnog] filtering traffic on BGP

 

hello SDNOGGERS :) 

 

          i would like you to clear  some confusing for me  on BGP filtering
traffic , what i know that if you want to filter a traffic that is coming
from peer you have to set the filter for that  neighbour as (in bound) and
vice versa. :/

 

but some one told me that if i want to filter traffic i have to consider the
opposite side (the neighbour's router perspective)

if it is a received traffics (for my router)  i have to apply "outbound" for
the neighbour inside the BGP

and if it is advertised prefixes i have to apply "inbound" for the neighbour

 

on my router : 

router bgp bla 

neighbour bla.bla.bla.bla  route-map bla IN           !! if it is
(advertised) prefix from me 

neighbour bla.bla.bla.bla route-map bla OUT  !! if it is a (received)
prefix  from that neighbour 

 

so witch one is true :/ 

 

 

 

--Mnhl

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sdnog.sd/pipermail/sdnog/attachments/20160304/f5f438a1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Traffic Engineering Basics.docx
Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document
Size: 176110 bytes
Desc: not available
URL: <http://lists.sdnog.sd/pipermail/sdnog/attachments/20160304/f5f438a1/attachment.docx>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4287 bytes
Desc: not available
URL: <http://lists.sdnog.sd/pipermail/sdnog/attachments/20160304/f5f438a1/attachment.bin>


More information about the sdnog mailing list