From: Erick (erickbe@xxxxxxxxx)
Date: Sat Jun 17 2000 - 14:33:28 GMT-3
Hi,
'deny _600$' will deny any as_path that ends in 600,
whereas 'deny ^600$' will deny anything directly
connected to AS600. You want to use _600$ for
originating.
Erick Bergquist
--- "Joshua W. Watkins" <josh@mstates.com> wrote:
>
> When using the following config for an as-path
> filter to filter all
> routes originating from AS600 to remote AS 500, BGP
> ends up denying
> everyting.
>
> router bgp 100
>
> no synchronization
>
> bgp confederation identifier 666
>
> neighbor 172.16.4.5 remote-as 500
>
> neighbor 172.16.4.5 filter-list 1 out
>
> neighbor 172.16.10.1 remote-as 100
>
> neighbor 172.16.10.1 next-hop-self
>
> !
>
> ip classless
>
> ip as-path access-list 1 deny ^600$
>
> ip as-path access-list 1 permit .*
>
> I then change the ip as-path access-list to deny
> _600$ instead of deny
> ^600$ and BGP filters all routes originating from AS
> 600 and allows
> everything else. Can someone explain why _600$
> works and ^600$ does
> not?
=====
- Erick B. | erickbe(a)yahoo.com | http://berk.dhs.org
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:43 GMT-3