30 Jun
2015
30 Jun
'15
2:39 p.m.
On Tue, 30 Jun 2015, Matsuzaki Yoshinobu wrote:
Randy Bush <randy@psg.com> wrote
A friend in AS58587 confirmed that this was caused by a configuration error - it seems like related to redistribution, and they already fixed that.
7007 all over again. do not redistribute bgp into igp. do not redistribute igp into bgp.
I also suggested them to implement BGP community based route filtering in their outbound policy. Any other suggestions or thoughts to prevent such incidents in general?
At a minimum, AS-PATH filtering of outgoing routes to just your ASN(s) and your downstream customer ASNs. Whether this is done manually, built using AS-SETs from your route registry of choice, or through some other automated means is another story. jms