Skip to content

Latest commit

 

History

History
22 lines (15 loc) · 755 Bytes

04-filtering.md

File metadata and controls

22 lines (15 loc) · 755 Bytes
Raw

Challenge 4: Route Filtering

< Previous Challenge - Home - Next Challenge >

Description

Configure your onprem routers not to accept any prefix longer than a /24 (for example, /32 routes). You might use this Cisco configuration sample:

router bgp ?
  neighbor ?.?.?.? route-map fromvngs in
route-map fromvngs permit 10
  match ip address prefix-list max24
ip prefix-list max24 permit 0.0.0.0/0 le 24

Is a similar filtering possible in the Virtual Network Gateway?

Success Criteria

  • Onprem CSRs do not have any /32 route in their routing table learnt over BGP
  • Participants understand the importance of filtering routes in the on-prem device