On 2/27/13 4:07 PM, Jerry Bacon wrote:

> I've tried with and without next-hop-self on R3, it doesn't seem to make
> any difference.

On R3, do you have next-hop-self to neighbor R1 and vice-versa?

> On R1, I have:
> 
> ip as-path access-list 16 permit ^$
> ip as-path access-list 16 permit ^11xx1
> ip as-path access-list 16 deny _11xx1_
> ip as-path access-list 16 permit .*

> On R4, I have:
> 
> ip as-path access-list 10 permit ^11xx1
> ip as-path access-list 10 deny _11xx1_
> ip as-path access-list 10 permit .*

You could simplify that to:

ip as-path access-list 10 deny _11xx1_
ip as-path access-list 10 permit .*   <- Dangerous outbound to transit
connections.

Do you have any IP or prefix-list filters in place?

--
Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net
Impulse Internet Service  -  http://www.impulse.net/
Your local telephone and internet company - 805 884-6323 - WB6RDV
_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to