Re: Removing stuff from our router [7:44839]

2002-05-23 Thread Scott H.

Removing the route map and as-path filters will work the way you have it (if
you do "no route-map MyISP-In" it will remove the entire route-map), but you
should also remove the neighbor statements in your config. that reference
these things.  By looking at the configs., I'm assuming this is in a lab
environment and not a real implementation.

permit ^$ is simply permitting an empty as path.  In other words, only
routes originating in the local AS will be permitted.  It's a common way to
ensure that your AS does not become transit for somebody else's traffic.

permit ^[0-9]* is a little more complicated.  This statement is saying to
permit zero or more instances of a number between 0 and 9.  Do a search on
CCO for AS path filters and you should find some good info. to help you on
your way.

HTH,
Scott
CCIE #9340

""Anil Gupte""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> To remove this:
>
> route-map MyISP-In permit 10
>  match as-path 6
>  set local-preference 200
>
> Do I just do this?:
> no route-map MyISP-In permit 10
>
> Also, to remove:
> ip as-path access-list 1 permit ^[0-9]*
> ip as-path access-list 2 permit ^$
> ip as-path access-list 3 permit ^1234$
> ip as-path access-list 3 permit ^1234_[0-9]*_[0-9]*$
>
> Do I just?:
> no ip as-path access-list 1 permit ^[0-9]*
> no ip as-path access-list 2
> no ip as-path access-list 3
>
>
> Also what is that "permit ^$" and "permit ^[0-9]*" for?  What does it do?
>
> Thanx for the help.
>
> Anil Gupte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44846&t=44839
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Removing stuff from our router [7:44839]

2002-05-23 Thread Roberts, Larry

Yes, that will remove the route-map.
The ip as-path access-list "stuff" are called regular expressions.
If you are running BGP on this router, I would Highly recommend leaving this
stuff alone. 
You really need to provide more information about what this router is doing
and include its config ( sans PW'D and use xxx's for IP's )

That ip as-path access-list is most likely restricting the propagation of
BGP paths through your network. If this is an edge router that is receiving
the full internet routes ( 115K as of yesterday ), this *could* be setup to
restrict to certain ones only. If you have a downstream neighbor that is
using you as a transit AS, these are most likely the ASN's that they are
reaching through you.

These would allow ASN's :
1-9,blank(internal routes) and ( I think...) 123400-123499, although Im not
sure on the last one without my reference book in front of me.



Thanks

Larry 

-Original Message-
From: Anil Gupte [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, May 23, 2002 11:04 AM
To: [EMAIL PROTECTED]
Subject: Removing stuff from our router [7:44839]


To remove this:

route-map MyISP-In permit 10
 match as-path 6
 set local-preference 200

Do I just do this?:
no route-map MyISP-In permit 10

Also, to remove:
ip as-path access-list 1 permit ^[0-9]*
ip as-path access-list 2 permit ^$
ip as-path access-list 3 permit ^1234$
ip as-path access-list 3 permit ^1234_[0-9]*_[0-9]*$

Do I just?:
no ip as-path access-list 1 permit ^[0-9]*
no ip as-path access-list 2
no ip as-path access-list 3


Also what is that "permit ^$" and "permit ^[0-9]*" for?  What does it do?

Thanx for the help.

Anil Gupte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44848&t=44839
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Removing stuff from our router [7:44839]

2002-05-23 Thread Anil Gupte

No, this is a real implementation on our network.  Since I am not even a
CCNA yet (maybe in a couple of weeks), I wanted to make sure I would not
break something.  I just substituted names and AS numbers.  I am hopefully
going to take advanced routing and learn more about the BGP soon after my
test.

Thanx,
Anil Gupte

- Original Message -
From: "Scott H." 
To: 
Sent: Thursday, May 23, 2002 12:09 PM
Subject: Re: Removing stuff from our router [7:44839]


> Removing the route map and as-path filters will work the way you have it
(if
> you do "no route-map MyISP-In" it will remove the entire route-map), but
you
> should also remove the neighbor statements in your config. that reference
> these things.  By looking at the configs., I'm assuming this is in a lab
> environment and not a real implementation.
>
> permit ^$ is simply permitting an empty as path.  In other words, only
> routes originating in the local AS will be permitted.  It's a common way
to
> ensure that your AS does not become transit for somebody else's traffic.
>
> permit ^[0-9]* is a little more complicated.  This statement is saying to
> permit zero or more instances of a number between 0 and 9.  Do a search on
> CCO for AS path filters and you should find some good info. to help you on
> your way.
>
> HTH,
> Scott
> CCIE #9340
>
> ""Anil Gupte""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > To remove this:
> >
> > route-map MyISP-In permit 10
> >  match as-path 6
> >  set local-preference 200
> >
> > Do I just do this?:
> > no route-map MyISP-In permit 10
> >
> > Also, to remove:
> > ip as-path access-list 1 permit ^[0-9]*
> > ip as-path access-list 2 permit ^$
> > ip as-path access-list 3 permit ^1234$
> > ip as-path access-list 3 permit ^1234_[0-9]*_[0-9]*$
> >
> > Do I just?:
> > no ip as-path access-list 1 permit ^[0-9]*
> > no ip as-path access-list 2
> > no ip as-path access-list 3
> >
> >
> > Also what is that "permit ^$" and "permit ^[0-9]*" for?  What does it
do?
> >
> > Thanx for the help.
> >
> > Anil Gupte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44862&t=44839
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Removing stuff from our router [7:44839]

2002-05-23 Thread Scott H.

I wouldn't suggest playing with this until you really understand what you
are doing.  You could do some major damage to your network.

""Anil Gupte""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> No, this is a real implementation on our network.  Since I am not even a
> CCNA yet (maybe in a couple of weeks), I wanted to make sure I would not
> break something.  I just substituted names and AS numbers.  I am hopefully
> going to take advanced routing and learn more about the BGP soon after my
> test.
>
> Thanx,
> Anil Gupte
>
> - Original Message -
> From: "Scott H."
> To:
> Sent: Thursday, May 23, 2002 12:09 PM
> Subject: Re: Removing stuff from our router [7:44839]
>
>
> > Removing the route map and as-path filters will work the way you have it
> (if
> > you do "no route-map MyISP-In" it will remove the entire route-map), but
> you
> > should also remove the neighbor statements in your config. that
reference
> > these things.  By looking at the configs., I'm assuming this is in a lab
> > environment and not a real implementation.
> >
> > permit ^$ is simply permitting an empty as path.  In other words, only
> > routes originating in the local AS will be permitted.  It's a common way
> to
> > ensure that your AS does not become transit for somebody else's traffic.
> >
> > permit ^[0-9]* is a little more complicated.  This statement is saying
to
> > permit zero or more instances of a number between 0 and 9.  Do a search
on
> > CCO for AS path filters and you should find some good info. to help you
on
> > your way.
> >
> > HTH,
> > Scott
> > CCIE #9340
> >
> > ""Anil Gupte""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > To remove this:
> > >
> > > route-map MyISP-In permit 10
> > >  match as-path 6
> > >  set local-preference 200
> > >
> > > Do I just do this?:
> > > no route-map MyISP-In permit 10
> > >
> > > Also, to remove:
> > > ip as-path access-list 1 permit ^[0-9]*
> > > ip as-path access-list 2 permit ^$
> > > ip as-path access-list 3 permit ^1234$
> > > ip as-path access-list 3 permit ^1234_[0-9]*_[0-9]*$
> > >
> > > Do I just?:
> > > no ip as-path access-list 1 permit ^[0-9]*
> > > no ip as-path access-list 2
> > > no ip as-path access-list 3
> > >
> > >
> > > Also what is that "permit ^$" and "permit ^[0-9]*" for?  What does it
> do?
> > >
> > > Thanx for the help.
> > >
> > > Anil Gupte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44878&t=44839
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]