Our upstream ISP offeres us a "Blackhole" service for prefix's we consider disingenious....
I have configured an external-peer in BGP, and now want to test a prefix. Will the following configuration simply drop the packets or will they send to the blackhole please?
set policy-options policy-statement blackhole term 1 from route-filter xxx.xxx.xxx.xxx/32 exact
set policy-options policy-statement blackhole term 1 then discard
set protocols bgp group blackhole export blackhole
Yes. Understood. We inform the ISP via the route to the blackhole peer. Any prefix they recieve from the blackhole they will block.
What I am trying to work out is how to advertise that prefix to the black hole as it will not be an aggregated prefix.
So, to explain a little better.
We have a peer to our upstream provider that we receive the complete internet routing table on.
Our upstream provider offer a "blackhole" service on a different peer.
I have configured another external bgp group to the blackhole peer and this is established.
So, now I need to know how to configure the junos to send a prefix to the blackhole peer (remembering that it could be a single host address so cannot use aggregation)..... Obviously we don't know the prefix unless we get hit, then we simpley announce it to the blackhole peer.
What I need to know is how do I configure that announcement to the blackhole peer?
Sorry if I am asking a stupid question but I am not experienced with the community string.....
What do I put int the "black-hole member x:x" section?
Just been informed no community is needed, so I just need a way to advetrtise to the blackhole peer a prefix... that is it.... but cant do it for some reason..
So, here is the actual problem.
I need to advertise these /32 node addresses or whatever prefix's it may be, to the blackhole upstream ISP. Normally we would do this with aggregation, which is no problem, except for the fact that the aggregation is always a /24 or greater prefix and that is not usable in this case..... it may be that the /32 is all I want to advertise..... not the /24 aggregate.... as that would block the complete ;24 and not just the /32.....
That, Mr. Kingsman, is spot on.... works a treat.
Thank you. Much Much Kudos.... I was just missing the discard statement.... 🙂