cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
884
Views
0
Helpful
1
Replies

Block Specific Countries using BGP AS

efrazee
Beginner
Beginner

Hello,

I would like to block and entire country (Russia). Would it be possible if I had BGP to block all Russia AS numbers to accomplish this?

Thank you in advance

1 Reply 1

John Blakley
Advisor
Advisor

You can create an as-path access-list to only allow certain ASes into your network.

If the AS number was 100, you could do something like:

ip as-path access-list 1 permit _100_

ip as-path access-list 1 permit _100$

route-map DenyAS deny 10

match as-path 1

route-map DenyAS permit 20

router bgp 400

neighbor route-map DenyAS in

The as-path acl will match on anything coming from 100 or through 100 and deny based on the route map. (The second line doesn't necessarily need to exist in the as-path acl, but I put it in there for good measure.)

HTH,
John

*** Please rate all useful posts ***

HTH, John *** Please rate all useful posts ***
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: