Re: bgpd help!!

2009-12-16 Thread Pete Vickers
On 16. des.. 2009, at 22.36, Martin Hein wrote: On Wed, 16 Dec 2009 11:19:33 -0700 "Andy Nguyen" wrote: If I configure community as Martin suggested this will also take out the path to my network. Thanks. If your real AS is transit only for your prefix it wont work. Your real AS should ann

Re: bgpd help!!

2009-12-16 Thread Martin Hein
On Wed, 16 Dec 2009 11:19:33 -0700 "Andy Nguyen" wrote: > If I configure community as Martin > suggested this will also take out the path to my network. Thanks. If your real AS is transit only for your prefix it wont work. Your real AS should announce your prefix. The private AS should announce

Re: bgpd help!!

2009-12-16 Thread Andy Nguyen
@openbsd.org Subject: Re: bgpd help!! On Wed, Dec 16, 2009 at 09:55:40AM +0100, Henning Brauer wrote: > * Stuart Henderson [2009-12-16 02:31]: > > On 2009-12-16, Doran Mori wrote: > > > Have you tried looking at the filter rules in bgpd.conf(5)? > > > > > > O

Re: bgpd help!!

2009-12-16 Thread Pete Vickers
How about aggregation? That's a nice knob to have (I use it quite often). The atomic-aggregate option cold be used legitimately (see RFC4271) to hide an (RFC1918) AS in some circumstances. /Pete On 16. des.. 2009, at 10.29, Claudio Jeker wrote: On Wed, Dec 16, 2009 at 09:55:40AM +0100,

Re: bgpd help!!

2009-12-16 Thread Martin Hein
On Tue, 15 Dec 2009 16:18:31 -0700 "Andy Nguyen" wrote: > Is there a way to strip Private As (65xxx) so it does not advertise to > the ISP provider? Thanks Use communities on peers with real ASNs. match from $peer set community 666:666 Then when announcing to peers and upstreams. deny to $pee

Re: bgpd help!!

2009-12-16 Thread Claudio Jeker
On Wed, Dec 16, 2009 at 09:55:40AM +0100, Henning Brauer wrote: > * Stuart Henderson [2009-12-16 02:31]: > > On 2009-12-16, Doran Mori wrote: > > > Have you tried looking at the filter rules in bgpd.conf(5)? > > > > > > Off the top of my head something like: > > > deny to { AS 65xxx } > > > >

Re: bgpd help!!

2009-12-16 Thread Henning Brauer
* Stuart Henderson [2009-12-16 02:31]: > On 2009-12-16, Doran Mori wrote: > > Have you tried looking at the filter rules in bgpd.conf(5)? > > > > Off the top of my head something like: > > deny to { AS 65xxx } > > the OP is probably looking for something that strips private AS out > of the pa

Re: bgpd help!!

2009-12-15 Thread Doran Mori
On Tue, Dec 15, 2009 at 5:25 PM, Stuart Henderson wrote: > On 2009-12-16, Doran Mori wrote: >> Have you tried looking at the filter rules in bgpd.conf(5)? >> >> Off the top of my head something like: >> deny to { AS 65xxx } > > the OP is probably looking for something that strips private AS ou

Re: bgpd help!!

2009-12-15 Thread Stuart Henderson
On 2009-12-16, Doran Mori wrote: > Have you tried looking at the filter rules in bgpd.conf(5)? > > Off the top of my head something like: > deny to { AS 65xxx } the OP is probably looking for something that strips private AS out of the path, but still advertises them, which isn't supported.

Re: bgpd help!!

2009-12-15 Thread Doran Mori
Have you tried looking at the filter rules in bgpd.conf(5)? Off the top of my head something like: deny to { AS 65xxx } dmo

bgpd help!!

2009-12-15 Thread Andy Nguyen
Is there a way to strip Private As (65xxx) so it does not advertise to the ISP provider? Thanks