This is an old revision of the document!
Cisco BGP
see also: networking, cisco, Secure BGP template for Cisco
commands:
closes bgp sessions
clear ip bgp *
Please write more coments on configurations!!
router bgp 15393 no synchronization bgp dampening neighbor customer-pg peer-group neighbor customer-pg route-map customer-rm in neighbor customer-pg route-map standardout out neighbor X.X.X.A peer-group customer-pg neighbor X.X.X.A remote-as 65502 neighbor X.X.X.A filter-list 100 in neighbor X.X.X.A distribute-list 100 in ! ! as-path filter to catch peers announcements no ip as-path access-list 100 ip as-path access-list 100 permit _(65502)$ ! acl to catch adverts for peers address space no access-list 100 access-list 100 permit ip 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0
! acl to catch adverts for sub-aggregates of own address space
no access-list 199 access-list 199 permit ip X.X.X.0 0.0.31.255 255.255.240.0 0.0.15.255 ! acl to catch adverts for own address space no access-list 97 access-list 97 permit X.X.X.0 0.0.31.255
! acl to catch adverts for bogus address space no access-list 98 access-list 98 permit 10.0.0.0 0.255.255.255 access-list 98 permit 172.16.0.0 0.15.255.255 access-list 98 permit 192.168.0.0 0.0.255.255 access-list 98 permit 0.0.0.0 0.255.255.255 access-list 98 permit 127.0.0.0 0.255.255.255 access-list 98 permit 128.0.0.0 0.0.255.255 access-list 98 permit 191.255.0.0 0.0.255.255 access-list 98 permit 192.0.0.0 0.0.0.255 access-list 98 permit 223.255.255.0 0.0.0.255 access-list 98 permit 224.0.0.0 15.255.255.255
! acl to catch adverts for default route no access-list 99 access-list 99 permit 0.0.0.0 0.0.0.0 route-map customer-rm deny 10 match ip address 97 98 99
route-map customer-rm permit 20 set local-preference 150
route-map standardout deny 10 match ip address 98 99 199 route-map standardout permit 20