On Wednesday, August 03, 2011 07:23:46 PM Paul Stewart wrote: > Yeah - we used to filter based on AS-SET at one time - we > quickly maxxed out the available memory (for config > storage) on Cisco 7600 platforms with Sup720-3BXL's > doing this. Now it's just max-prefix except our > downstream customers where we specifically run filters > to control what they announce to us.
Same here, although we also throw in AS_PATH filtering just to add a little more "safety". > In a perfect world it would be all done via AS-SET but as > Rob pointed out, not everyone keeps their data up to > date unfortunately.... RPKI is now the way forward :-). Mark.
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
