nanog mailing list archives
Re: Route Reflector architecture and how to get small customer blocks in to BGP?
From: Joe Provo <nanog-post () rsuc gweep net>
Date: Sun, 28 Jan 2007 16:12:11 -0500
On Sun, Jan 28, 2007 at 10:59:50AM -0700, Danny McPherson wrote: [snip]
o If you're going to use redistribution - or not - ensure that all external advertisement policies require explicit match of advertise communities and default is to deny
This should be just good security policy. I think of it as a network-level instance of "that which is not expressly permitted is denied" which everyone applies for services on their hosts, right :-) Cheers, Joe -- RSUC / GweepNet / Spunk / FnB / Usenix / SAGE
Current thread:
- Route Reflector architecture and how to get small customer blocks in to BGP? Pete Crocker (Jan 27)
- Re: Route Reflector architecture and how to get small customer blocks in to BGP? Joe Provo (Jan 28)
- Re: Route Reflector architecture and how to get small customer blocks in to BGP? Danny McPherson (Jan 28)
- Re: Route Reflector architecture and how to get small customer blocks in to BGP? Steve Meuse (Jan 28)
- Re: Route Reflector architecture and how to get small customer blocks in to BGP? Joe Provo (Jan 28)
- Re: Route Reflector architecture and how to get small customer blocks in to BGP? Danny McPherson (Jan 28)
- <Possible follow-ups>
- RE: Route Reflector architecture and how to get small customer blocks in to BGP? John van Oppen (Jan 28)
- Re: Route Reflector architecture and how to get small customer blocks in to BGP? Joe Provo (Jan 28)