And remember that if you plan to accept prefixes from external neighbors and send to the black hole route you need "accept-remote-nexthop".
On Fri, Jan 15, 2016 at 3:20 PM, Johan Borch <[email protected]> wrote: > Thanks > > Setting route preference helped :) > > Johan > > On Fri, Jan 15, 2016 at 12:23 AM, Charles van Niman <[email protected]> > wrote: > >> What route preference is your IGP route, and what IGP? I assume your >> discard/static has a route preference of 5? Also, do you mind pasting >> the show route extensive output? Is your static discard route in the >> same routing-instance/VRF as the BGP prefix? >> >> /Charles >> >> On Thu, Jan 14, 2016 at 3:10 PM, Johan Borch <[email protected]> >> wrote: >> > Hi! >> > >> > I have implemented RTBH in my small network of 8 routers. DFZ is running >> in >> > a L3VPN and each router has an multihop ibgp-session with my RTBH-router >> > and it works, but I have one thing that annoys me. >> > >> > If I announce an offending IP to be black holed, only one of the routers >> > will point to the discard route. The other 7 will see the announced route >> > via BGP från the one that got it first I guess and send the traffic to >> that >> > one where is is discarded. If I do show extensive on the route it is >> prefer >> > because of IGP. I can't figure out how to get each router to prefer the >> > discard localy. If I do local pref on one router the other 7 will send >> the >> > traffic there instead. >> > >> > Every router has >> > >> > route a.b.c.d/32 { >> > discard; >> > install; >> > } >> > >> > And from sending RTBH router, they are announced with next-hop a.b.c.d. >> > >> > Idéas? :) >> > >> > Regards >> > Johan >> > _______________________________________________ >> > juniper-nsp mailing list [email protected] >> > https://puck.nether.net/mailman/listinfo/juniper-nsp >> > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
