Jump to content

Не работает blackhole

Пытаюсь на cisco 7301 настроить blackhole

router bgp AAAAA
 no synchronization
 bgp log-neighbor-changes
 bgp deterministic-med
 network aaa.aaa.aaa.aaa mask
 redistribute static route-map BGP-BLACKHOLE
 neighbor xxx.xxx.xxx.xxx remote-as 12389
 neighbor xxx.xxx.xxx.xxx version 4
 neighbor xxx.xxx.xxx.xxx send-community both
 neighbor xxx.xxx.xxx.xxx soft-reconfiguration inbound
 neighbor xxx.xxx.xxx.xxx route-map map-RTK_AS12389-in in
 neighbor xxx.xxx.xxx.xxx route-map map-RTK_AS12389-out out
 neighbor YYY.YYY.YYY.YYY remote-as 20485
 neighbor YYY.YYY.YYY.YYY version 4
 neighbor YYY.YYY.YYY.YYY send-community
 neighbor YYY.YYY.YYY.YYY soft-reconfiguration inbound
 neighbor YYY.YYY.YYY.YYY route-map map-TTK_AS20485-in in
 neighbor YYY.YYY.YYY.YYY route-map map-TTK_AS20485-out out
 distance bgp 180 200 200
 no auto-summary

ip route aaa.aaa.aaa.190 Null0 tag 666
ip bgp-community new-format
route-map BGP-BLACKHOLE permit 110
 match tag 666
 set community 12389:55555


Но вижу только один маршрут

#sh ip bgp neighbors xxx.xxx.xxx.xxx advertised-routes
BGP table version is 4359050, local router ID is aaa.aaa.aaa.xyz
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
   Network          Next Hop            Metric LocPrf Weight Path
*> aaa.aaa.aaa.aaa/21                  0         32768 i
Total number of prefixes 1



Что я забыл добавить в конфиг ?


Share this post

Link to post
Share on other sites

Сам блекхол маршрут редистрибьютится? Если сделать show ip bgp aaa.aaaa.aaaa.190 он есть в BGP RIB?

И проверяйте раут-мапы, возможно блокируется ими.

Share this post

Link to post
Share on other sites
#show  ip bgp aaa.aaa.aaa.190
BGP routing table entry for aaa.aaa.aaa.190/32, version 4328341
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  Local from (aaa.aaa.aaa.77)
      Origin incomplete, metric 0, localpref 100, weight 32768, valid, sourced, best
      Community: 12389:55555
ip prefix-list AAA-NET seq 5 permit aaa.aaa.aaa.0/21

route-map map-TTK_AS20485-out permit 100
  match ip address prefix-list AAA-NET
route-map map-RTK_AS12389-out permit 100
 match ip address prefix-list AAA-NET
 set community 12389:8015 12389:8025 12389:8185 12389:8255 12389:8275 12389:8405


Edited by AdmSasha
скрытие ip

Share this post

Link to post
Share on other sites

Как выше и сказали - роут-мапы на исход не пускают ничего кроме /21. Добавьте что-то вроде

ip prefix-list AAA-NET seq 10 permit aaa.aaa.aaa.0/21 ge 32


Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this