topic BGP wildcard filtering to prevent /32 regardless of network in General Topics

BGP wildcard filtering to prevent /32 regardless of network

MyUsername — Thu, 08 Oct 2020 07:45:01 GMT

Hi Forum Folks,

is there a way to filter within PA BGP's all /32 networks ?

we have a community based connection to a customer and i want to prevent redistribution of *.*.*.*/31-32 networks

As far as i tried, i have to be very specific with such a filter on the PA

e.g.

10.19.18.0/30

10.20.99.0/30

I have to create a filter for each of them

instead of

e.g.

0.0.0.0/30

like on other platforms

Is there an easy way ?

Re: BGP wildcard filtering to prevent /32 regardless of network

BPry — Fri, 09 Oct 2020 02:06:57 GMT

@MyUsername,

The address prefix needs to be an exact match, and doesn't support the use of wildcards or REGEX to the best of my knowledge. If you have a long list of addresses to input I'd personally use the API so that you can create a script that integrates with your IPAM so you don't have to actually manage all of this manually.

Re: BGP wildcard filtering to prevent /32 regardless of network

MyUsername — Fri, 09 Oct 2020 06:55:29 GMT

@BPry

thanks for solving this that quickly.

But its still a pity, that this isn't possible.

It would prevent a lot of devops work of checking back and forth, before provisioning.