+10<br clear="all"><br><div><div style="font-family:Calibri,sans-serif"><div style="font-size:14px"><span style="color:rgb(127,0,127);font-size:13px"><font color="#002060" style="color:rgb(0,0,0);font-family:Calibri,sans-serif"><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 13px/normal Calibri">
<b>Skeeve Stevens, CEO</b></p></font></span></div><div style="font-size:14px"><span style="font-size:13px;font-family:Calibri">eintellego Pty Ltd</span></div><div><span style="font-size:13px;font-family:Calibri"><a href="mailto:skeeve@eintellego.net" target="_blank">skeeve@eintellego.net</a> ; <a href="http://www.eintellego.net" target="_blank">www.eintellego.net</a></span><span style="color:rgb(127,0,127);font-size:13px"><font color="#002060" style="color:rgb(0,0,0);font-family:Calibri,sans-serif"><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 13px/normal Calibri">
Phone: 1300 753 383 ; Fax: (+612) 8572 9954</p><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 13px/normal Calibri">Cell +61 (0)414 753 383 ; <a>skype://skeeve</a></p>
<p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 13px/normal Calibri"><a href="http://facebook.com/eintellego" target="_blank">facebook.com/eintellego</a></p><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 13px/normal Calibri">
<a href="http://twitter.com/networkceoau" target="_blank">twitter.com/networkceoau</a> ; <a href="http://www.linkedin.com/in/skeeve" target="_blank">www.linkedin.com/in/skeeve</a></p><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 13px/normal Calibri">
PO Box 7726, Baulkham Hills, NSW 1755 Australia</p></font></span><span style="color:rgb(127,0,127);font-size:13px"><div><span style="color:rgb(127,0,127);font-size:13px"><img src="http://eintellego.net/sig/logo.png"><br>
</span></div>
The Experts Who The Experts Call</span></div><div style="font-size:14px;color:rgb(127,0,127)"><span style="color:rgb(0,32,96);font-size:13px">Juniper - Cisco – IBM</span></div></div></div><br>
<br><br><div class="gmail_quote">On Tue, May 1, 2012 at 22:45, McDonald Richards <span dir="ltr"><<a href="mailto:macca@vocus.com.au" target="_blank">macca@vocus.com.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Ok – I'll bite.</div><div><br></div><div>This is not something you take lightly if you have no experience implementing it. You need to make sure you secure your boundary so that what your customer advertises to you is authentic and what you advertise to the rest of the world is authentic. Failure to do so can lead to very public outages.</div>
<div><br></div><div>If you really are new to BGP I suggest you watch one of Phillip Smith's BGP tutorials. The slide deck will point you towards templates etc that will assist you – particularly for Cisco kit.</div><div>
<br></div><div><a href="http://www.nanog.org/meetings/nanog44/abstracts.php?pt=MzAmbmFub2c0NA==&nm=nanog44" target="_blank">http://www.nanog.org/meetings/nanog44/abstracts.php?pt=MzAmbmFub2c0NA==&nm=nanog44</a></div>
<div><br></div><div>A few things that you should consider:</div><div>Max-prefix limits</div><div>AS-Path limits</div><div>Explicit prefix lists on your customer and if you have a fairly static network, your upstream carriers and peers</div>
<div>BGP communities, your internal use of them and what your providers will support (RTBH, prepending etc)</div><div>AS-PATH ACLs</div><div>"stupidity filters" (ie AS-path filtering tier 1 carriers like Level 3, Verizon US from domestic multi lateral peering points)</div>
<div><br></div><div>Macca</div><div><br></div><div><br></div><div><br></div><span><div style="border-right:medium none;padding-right:0in;padding-left:0in;padding-top:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:Calibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium none">
<span style="font-weight:bold">From: </span> James Mcintosh <<a href="mailto:james.mcintosh@rocketmail.com" target="_blank">james.mcintosh@rocketmail.com</a>><br><span style="font-weight:bold">Reply-To: </span> James Mcintosh <<a href="mailto:james.mcintosh@rocketmail.com" target="_blank">james.mcintosh@rocketmail.com</a>><br>
<span style="font-weight:bold">Date: </span> Tue, 1 May 2012 01:50:29 -0700 (PDT)<br><span style="font-weight:bold">To: </span> "<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
<span style="font-weight:bold">Subject: </span> [AusNOG] Downstream BGP Config<br></div><div><br></div><div><div><div style="font-size:12pt;font-family:times new roman,new york,times,serif"><div>Hi Noggers,</div><div><br>
</div><div>We use BGP upstream with our upstream carriers but now for the first time we have been asked by one of our larger customers to allow them to advertise their own IP block and AS number.</div><div><br></div><div>
We've never had a customer with this requirement before.</div><div><br></div><div>I'm hoping some of the experienced admins on the list could comment on what we need to consider.</div><div><br></div><div>Also a sample config for IOS would be super helpful as my BGP knowledge is pretty basic.</div>
<div><br></div><div>-James</div><div><br></div><div><br></div><div><br></div></div></div></div>_______________________________________________
AusNOG mailing list
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</span></div>
<br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br>