Remote Triggered Black Hole Filtering

From Internetworkpro

Jump to: navigation, search
This page or section provides device configuration instructions
Please note that the information on this page has not been checked for accuracy and is not intended as a replacement to documentation. Please ensure you understand your desired objectives before attempting to apply any examples listed.
See more examples at Category:Configuration

Contents

[edit] Triggering Router

interface Null0
 no ip unreachables
!
interface Loopback0
 ip address 10.0.0.1 255.255.255.255
 
router bgp 65000
 no synchronization
 no bgp client-to-client reflection
 bgp log-neighbor-changes
 redistribute static route-map black-hole-trigger
 neighbor ibgp-peers peer-group
 neighbor ibgp-peers remote-as 65000
 neighbor ibgp-peers route-reflector-client
 neighbor x.x.x.x peer-group ibgp-peers
 no auto-summary
!

route-map black-hole-trigger permit 10
 match tag 666
 set ip next-hop 10.255.255.255
 set local-preference 200
 set origin igp
 set community no-export
!
route-map black-hole-trigger deny 20

[edit] Edge Router

interface Null0
 no ip unreachables
!
interface Loopback0
 ip address 10.0.0.10 255.255.255.255
!
interface GigabitEthernet0/1
 ip verify unicast reverse-path
!
router bgp 65000
 no synchronization
 bgp log-neighbor-changes
 neighbor ibgp-peers peer-group
 neighbor 10.0.0.10 remote-as 65000

ip route 10.255.255.255 255.255.255.255 Null0

[edit] Triggering a Black Hole

ip route 172.18.192.1 255.255.255.255 Null0 tag 666
ip route 172.16.54.0 255.255.255.0 Null0 tag 666

[edit] Links

Personal tools