bgp blackhole problem

Hi all,

I had implemented bgp blackhole at my router with the customer, the configuration is as below:

route-map BLACKHOLE, permit, sequence 10 Match clauses: community (community-list filter): BLACKHOLE Set clauses: ip next-hop 192.168.1.3 Policy routing matches: 0 packets, 0 bytes route-map BLACKHOLE, permit, sequence 20 Match clauses: Set clauses: local-preference 300 Policy routing matches: 0 packets, 0 bytes route-map BLACKHOLE, permit, sequence 30 Match clauses: Set clauses: Policy routing matches: 0 packets, 0 bytes

ip route 192.168.1.3 255.255.255.255 Null0

Network Next Hop Metric LocPrf Weight Path

  • xxx.xxx.xxx.xxx/32 192.168.1.3 0 0 zzzzz i

BGP routing table entry for xxx.xxx.xxx.xxx/32, version 295265925 Paths: (1 available, no best path) Not advertised to any peer 38186 192.168.1.3 (inaccessible) from xxx.xxx.xxx.xxx (yyy.yyy.yyy.yyy) Origin IGP, metric 0, localpref 100, valid, external Community: xxx:666

the IP can't be blocked and the traffic to this IP is still going out, after I create the loopback with ip address 192.168.1.3 255.255.255.255, the xxx.xxx.xxx.xxx/32 become the best path and 192.168.1.3 is (accessible).

The traffic can't be gone via the customer side at the router which is facing with the customer, but the traffic of other routers within my network (ibgp) can go the the customer side and can't route to 192.168.1.3,

Please advise or suggest the solution, thanks.

My router is 7603 and running IOS s72033-jk9sv-mz.122-14.SX1.

Your help is much appreicated.

Regards, Chung

Reply to
Wong Wai Chung
Loading thread data ...

Instead of setting the next hop to an IP address and then putting in a static for that IP address to Null0, wouldn't it be better to just set the next hop to Null0 in the route-map?

Chris.

Reply to
Chris

Thanks, but the route-map is not supported "set interface" under bgp

Chung

Reply to
Wong Wai Chung

Thanks, but the route-map is not supported "set interface" under bgp

Chung

-------------------------------

Are you sure?

route-map TEST1, permit, sequence 10 Match clauses: community (community-list filter): BLACKHOLE Set clauses: interface Null0 Policy routing matches: 0 packets, 0 bytes

Chris.

Reply to
Chris

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.