[ixpmanager] Lifting sanity check for first ASN check up

Alexander Kronenberg kronenberg at serverion.com
Thu Jul 6 22:54:30 IST 2023


Hi Jasper,
Should it look like that:

    # Peer ASN == route's first ASN?
    if (bgp_path.first != <?= $int['autsys'] ?> ) then {
        bgp_large_community.add( IXP_LC_FILTERED_FIRST_AS_NOT_PEER_AS );
        accept;
    }

    # Skipping first ASN check for 65000
    if (<?= $int['autsys'] ?> == 65000) then {
        bgp_large_community.delete( IXP_LC_FILTERED_FIRST_AS_NOT_PEER_AS );
        accept;
    }

Where 65000 is an example of ASN.

On Thu, Jul 6, 2023 at 9:36 PM Jasper Yu <007seadog at gmail.com> wrote:

> Hi,
>
> You should be able to bypass the Peer ASN Check in the neighbors.foil.php
> teamplate when importing routes from specific neighbors.
>
> Thanks
>>
> On Fri, Jul 7, 2023 at 12:48 AM Alexander Kronenberg via ixpmanager <
> ixpmanager at inex.ie> wrote:
>
>> Greetings,
>> Is there a way to lift such sanity check for a specific peer?
>> I thought that a skinned file could help remove a large community which
>> does not allow to propagate such prefixes to other members. But looks like
>> it won't help because the skinned file is being processed before the
>> beginning of the standard filters.
>> Is there any other way but to put full import policy configuration for
>> specific peer in the skinned file?
>>
>> Thanks in advance!
>> _______________________________________________
>> INEX IXP Manager mailing list
>> ixpmanager at inex.ie
>> Unsubscribe or change options here:
>> https://www.inex.ie/mailman/listinfo/ixpmanager
>>
>
>
> --
> Jasper Yu
> About me: https://seadog007.me
> CV: https://seadog007.work
> Email: 007seadog at gmail.com, admin at seadog007.me
> Phone: +886920498225
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.inex.ie/pipermail/ixpmanager/attachments/20230707/1a7236f7/attachment.htm>


More information about the ixpmanager mailing list