2 Nov
2022
2 Nov
'22
10:20 a.m.
It's very important to specify the /24 inside the /23 for example so as you said "for all our subnets being advertised". On Tue, Nov 1, 2022 at 5:01 PM Randy Bush <randy@psg.com> wrote:
Thanks everyone for your inputs. So bottomline setup RPKI and setup ROA's for all our subnets being advertised.
if the BGP advertisements are correct, then mirror them in ROAs. most, if not all, CA UIs make that easy.
randy