28 Jan
2007
28 Jan
'07
3:57 p.m.
On 1/28/07, Danny McPherson <danny@tcb.net> wrote:
o If you're going to use redistribution - or not - ensure that all external advertisement policies require explicit match of advertise communities and default is to deny
I'll second that recommendation. I learned early in life that this can be a mess otherwise. We employed that technique at BBN/Genu and it kept us from leaking quite nicely. If a provisioning person forgot a customer inbound route-map or something, we didn't accidentally hose ourselves. -- -Steve