Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all, my edge routers are running IOS-XR 7.7.21. We have quite a bit of intentionally exposed customer public address space and have endless problems with garbage traffic from a select few ASN's who don't police their networks (14061 Digital Ocean...
Hi all, IOS-XR 7.5.2 on NCS5501. Was curious if anyone knows a command to allow a new administrative distance to apply without a hard BGP session reset? I'm trying to prioritize OSPF on internet-facing edge routers that have numerous eBGP peering s...
Hi all, I'm moving from a 3504 WAC to an EWC on a 9130AX and still trying to fully understand the conversion from WAC config to the various tags and profiles in EWC. Is there a layman's guide somewhere which walks one through the major WAC setting e...
I'm trying to take an NCS5501-SE from 663 to 7.x. First ran into the issue that ncs5500-eigrp is no longer present, at least not in the early 7.x releases which I'm required to go to as an intermediate. Fortunately I don't use EIGRP. I deactivate ...
Thanks all. Will try this out in a few days. I've got a new environment coming online with XR edge routers and will have the perfect opportunity to test.
Sure, I want to use BGP ASN 14061 as the source in an access list that blocks destination tcp port 21 and 22. So, I drop port 21 and 22 in port group, and then this would take the format: 510 deny tcp ??? any port-group PortGroupNameNow, typically o...
Huh? That is the entire purpose of this thread. I outlined that soft reconfig is not applying admin distance changes, and is there a workaround. David reproduced and determined that a weight change on a per-peer basis causes a RIB replacement, all...
Thanks David, I tried that with one peer and it worked for me as well. It will take some labor time to tinker with each peer and soft reset, but now I can avoid the interruption since this device is at an IXP with ~20 sessions, where backup would be...
Yep looks good there: Neighbor capabilities:Route refresh: advertised (old + new) and received (old + new)Graceful Restart (GR Awareness): received4-byte AS: advertised and receivedAddress family IPv4 Unicast: advertised and received