Aqui você vê as diferenças entre duas revisões dessa página.
Ambos lados da revisão anterior Revisão anterior Próxima revisão | Revisão anterior | ||
docs:bgp-filter-examples [2019/01/22 11:10] marcelo [reject_bogon_asns] |
docs:bgp-filter-examples [2019/01/22 11:21] (atual) marcelo [reject_bogon_prefixes] |
||
---|---|---|---|
Linha 29: | Linha 29: | ||
</code> | </code> | ||
===== reject_bogon_prefixes ===== | ===== reject_bogon_prefixes ===== | ||
- | ===== reject_long_aspaths ===== | + | <code>whois -h whois.radb.net fltr-martian</code> |
+ | <code> | ||
+ | policy-options { | ||
+ | prefix-list BOGONS_v4 { | ||
+ | 0.0.0.0/8; | ||
+ | 10.0.0.0/8; | ||
+ | 100.64.0.0/10; | ||
+ | 127.0.0.0/8; | ||
+ | 169.254.0.0/16; | ||
+ | 172.16.0.0/12; | ||
+ | 192.0.2.0/24; | ||
+ | 192.88.99.0/24; | ||
+ | 192.168.0.0/16; | ||
+ | 198.18.0.0/15; | ||
+ | 198.51.100.0/24; | ||
+ | 203.0.113.0/24; | ||
+ | 224.0.0.0/4; | ||
+ | 240.0.0.0/4; | ||
+ | } | ||
+ | policy-statement BGP_FILTER_IN { | ||
+ | term IPv4 { | ||
+ | from { | ||
+ | prefix-list BOGONS_v4; | ||
+ | } | ||
+ | then reject; | ||
+ | } | ||
+ | } | ||
+ | } | ||
+ | </code> | ||
===== reject_transit_paths ===== | ===== reject_transit_paths ===== | ||
+ | <code> | ||
+ | policy-options { | ||
+ | policy-statement bgp-import-policy { | ||
+ | term no-transit-leaks { | ||
+ | from as-path no-transit-import-in; | ||
+ | then reject; | ||
+ | } | ||
+ | } | ||
+ | } | ||
+ | |||
+ | as-path no-transit-import-in ".* (174|209|701|702|1239|1299|2914|3257|3320|3356|3549|3561|4134|5511|6453|6461|6762|7018) .*"; | ||
+ | </code> | ||
===== reject_small_prefixes ===== | ===== reject_small_prefixes ===== | ||
+ | <code> | ||
+ | policy-options { | ||
+ | policy-statement bgp-import-policy { | ||
+ | term reject_too_small_prefixes_v4 { | ||
+ | from { | ||
+ | route-filter 0.0.0.0/0 prefix-length-range /25-/32; | ||
+ | } | ||
+ | then { | ||
+ | reject; | ||
+ | } | ||
+ | } | ||
+ | } | ||
+ | } | ||
+ | </code> | ||