Foundry doesnt support bgp routes that are destined to null0. You can workaround by routing to the loopback but I believe this would use more CPU under an attack to a bogon route.
I raised this with foundry 2 years ago, I dont know if its been addressed. Steve On Sun, Oct 15, 2006 at 04:09:51PM +0300, Nikolay Pavlov wrote: > Hi, folks. > I am trying to configure CYMRU BOGONS server like described in this > guide: http://www.cymru.com/BGP/bogon-rs.html > I am using Cisco router example and on my cs3550 everything is fine. > However in case of BigIron8000 this routes is unreachable: > > sh ip bgp neighbor 38.229.0.5 routes-summary > 1 IP Address: 38.229.0.5 > Routes Accepted/Installed:61, Filtered/Kept:0, Filtered:0 > Routes Selected as BEST Routes:0 > BEST Routes not Installed in IP Forwarding Table:0 > Unreachable Routes (no IGP Route for NEXTHOP):61 > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > History Routes:0 > > NLRIs Received in Update Message:61, Withdraws:0 (0), Replacements:0 > NLRIs Discarded due to > Maximum Prefix Limit:0, AS Loop:0 > Invalid Nexthop:0, Invalid Nexthop Address:0.0.0.0 > Duplicated Originator_ID:0, Cluster_ID:0 > > Routes Advertised:0, To be Sent:0, To be Withdrawn:0 > NLRIs Sent in Update Message:0, Withdraws:0, Replacements:0 > > Peer Out of Memory Count for: > Receiving Update Messages:0, Accepting Routes(NLRI):0 > Attributes:0, Outbound Routes(RIB-out):0 Outbound Routes Holder:0 > > So routes was not installed in routing table. > > Here is additional info: > > telnet at fbi8000-Border-NY#sh ip bgp neighbor 38.229.0.5 routes > There are 61 accepted routes from neighbor 38.229.0.5 > Searching for matching routes, use ^C to quit... > Status A:AGGREGATE B:BEST b:NOT-INSTALLED-BEST C:CONFED_EBGP D:DAMPED > E:EBGP H:HISTORY I:IBGP L:LOCAL M:MULTIPATH S:SUPPRESSED > F:FILTERED > Prefix Next Hop Metric LocPrf Weight > Status > 1 1.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 2 2.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 3 5.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 4 7.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 5 10.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 6 23.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 7 27.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 8 31.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > 9 36.0.0.0/8 192.0.2.1 0 100 0 E > AS_PATH: 65333 > > and so on... > > telnet at fbi8000-Border-NY#sh ip route 192.0.2.1 > Total number of IP routes: 90238, avail: 309762 (out of max 400000) > Destination Gateway Port Cost Type > 192.0.2.1/32 255.255.255.255 drop 1 S > > > -- > ====================================================================== > - Best regards, Nikolay Pavlov. <<<----------------------------------- > ====================================================================== > > _______________________________________________ > foundry-nsp mailing list > foundry-nsp at puck.nether.net > http://puck.nether.net/mailman/listinfo/foundry-nsp -- Stephen J. Wilcox BSc (Hons). CCIE #10730 Technical Director, Telecomplete http://www.telecomplete.co.uk/
