Distribute List filtering allows filtering of network prefixes on BGP using access control lists on a neighbour specific basis.
The distribution list can be activated on a neighbour with the command neighbour x.x.x.x distribute-list y
followed by in
for inbound filtering or out
for outbound filtering
ip access-list extended restrict-routes ! Allows 192.168.0.0 - 192.168.255.255 with any prefix length permit ip 192.168.0.0 0.0.255.255 host 255.255.255.255 ! Applying distribute list 'restrict-routes' inbound from 1.2.3.4 neighbour 1.2.3.4 distribute-list restrict-routes in
Leave a Reply