I would have a look here:
http://www.team-cymru.org/Services/Bogons/routeserver.html

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6642/pro
d_white_paper0900aecd80313fac.pdf

They have a sample configuration. You will need uRPF configured on your
interfaces as well to do the actual dropping of traffic with these source
addresses. The remote routers will need to modify the next-hop on receiving
a route with the community x:666, although it appears you are only concerned
with the static routes.

David

--
http://dcp.dcptech.com
 

> -----Original Message-----
> From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-
> boun...@puck.nether.net] On Behalf Of Naveen Nathan
> Sent: Thursday, September 17, 2009 8:23 PM
> To: cisco-nsp@puck.nether.net
> Subject: [c-nsp] Assistance configuring a router to trigger remote
> blackhole
> 
> Hi,
> 
> I am new to the list, so please go easy on me.
> 
> I'm in need of assistance configuring remote trigger blackhole in
> IOS. This feature is supported by our transit provider. I'm unsure
> if it's working or not, but since the nulled routes don't appear to
> be advertised to the transit peer, I'm assuming not.
> 
> I've attached a portion of the cisco-config (substituting sensitive
> info,
> but it should be easy enough to follow).
> 
> Would someone mind suggesting if I'm missing anything of particular
> importance. It would be much appreciated.
> 
> Thanks.
> 
> --
> Naveen Nathan
> 
> To understand the human mind, understand self-deception. - Anon

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to