Checking if bgp_next_hop matches bgp neighbor
Hi, just wondering what the correct way is to filter if the advertised bgp_next_hop matches the neighbor address in a filter. Would if from != bgp_next_hop then reject; do the trick, or do I have to define a function as inbound filter and pass the neighbor address as a parameter? Thanks, Peter # Kind Regards/Mit freundlichen Gruessen # # PEERING GmbH - Devision ECIX # Lindenallee 27, 14050 Berlin, Germany # # Geschaeftsfuehrer: Stefan Wahl, Peter Lieven # Amtsgericht Charlottenburg, HRB 97752B, USt-Id-Nr: DE2746301838 # # Web: http://www.ecix.de/ # Phone: +49 30 81495450 # Fax: +49 30 81495459
On 02.09.2010 16:10 Peter Lieven wrote
just wondering what the correct way is to filter if the advertised bgp_next_hop matches the neighbor address in a filter.
Would
if from != bgp_next_hop then reject;
do the trick, or do I have to define a function as inbound filter and pass the neighbor address as a parameter?
Imho this check should do. Would make sense to add this to your list of checks (martians, prefix length, source ...) best regards, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold@nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333
On 2.9.2010 16:10, Peter Lieven wrote:
Hi,
just wondering what the correct way is to filter if the advertised bgp_next_hop matches the neighbor address in a filter.
Would
if from != bgp_next_hop then reject;
Yes, this clause is fine and it should do what you're looking for. Ondrej
do the trick, or do I have to define a function as inbound filter and pass the neighbor address as a parameter?
Thanks, Peter
# Kind Regards/Mit freundlichen Gruessen # # PEERING GmbH - Devision ECIX # Lindenallee 27, 14050 Berlin, Germany # # Geschaeftsfuehrer: Stefan Wahl, Peter Lieven # Amtsgericht Charlottenburg, HRB 97752B, USt-Id-Nr: DE2746301838 # # Web: http://www.ecix.de/ # Phone: +49 30 81495450 # Fax: +49 30 81495459
participants (3)
-
Arnold Nipper -
Ondrej Filip -
Peter Lieven