nanog mailing list archives

RE: Ingress filtering on transits, peers, and IX ports


From: <adamv0025 () netconsultings com>
Date: Thu, 15 Oct 2020 17:29:21 +0100

Chris Adams
Sent: Thursday, October 15, 2020 3:59 PM

Once upon a time, adamv0025 () netconsultings com
<adamv0025 () netconsultings com> said:
Actually ideally there would be a feature/knob to automatically sync BGP
(and static routes) with packet filters.

Junos has prefix-lists that can be referenced in both BGP policy and
firewall
statements.

What I mean was a firewall filter that would get updated with accordance to
prefixes received/advertised via BGP, even better if this was a default
behaviour.


adam 



Current thread: