[lacnog] BGP Filtering

[Chriztoffer Hansen]

On Tue, 3 Mar 2020 at 01:15, Diego Aguilar Rosado
<diegoaguilar9661 en gmail.com> wrote:
> Aplicar AccessList como seguridad para mi  ASN es un hecho pero mi duda es, ¿Cual es la recomendación de donde aplicar ACLs, en la interface o como distributed-list en el proceso de router bgp?.

Applying prefix-list(s) inside route-maps (MT calls it routeing filter
[2]) - and route-maps to your eBGP peer session(s) - is most often the
recommendation.

E.g. using /routing bgp peer set [id] in-filter=[in-filter-name]
out-filter=[out-filter-name] -- [0][1]

[0]: https://wiki.mikrotik.com/wiki/Manual:Routing/BGP#Peer
[1]: https://wiki.mikrotik.com/wiki/Manual:Simple_BGP_Multihoming#Network_Advertisements_and_Routing_Filters
[2]: https://wiki.mikrotik.com/wiki/Manual:Routing/Routing_filters

-- 
Chriztoffer