[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Howto for BGP black holing/null routing
Also:
http://docs.as701.net/tmp/CustomerBlackhole.txt
Remember to set eBGP multihop on sessions for the next-hop rewrite capability :)
- Jared
On Feb 22, 2011, at 4:54 PM, ?ukasz Bromirski wrote:
> On 2011-02-22 22:42, David Hubbard wrote:
>> I was wondering if anyone has a howto floating around on the
>> step by step setup of having an internal bgp peer for sending
>> quick updates to border routers to null route sources of
>> undesirable traffic? I've seen it discussed on nanog from
>> time to time, typically suggesting using Zebra, but could
>> not search up a link on a step by step.
>
> Take a look here for starters:
> http://www.cisco.com/web/about/security/intelligence/blackhole.pdf
>
> Searching through NANOG archives will return a couple of sessions
> that went through the other vendor configs for such functionality.
>
> --
> "There's no sense in being precise when | ?ukasz Bromirski
> you don't know what you're talking | jid:lbromirski at jabber.org
> about." John von Neumann | http://lukasz.bromirski.net