Limiting Routes Received From A Peer Or Peer Group - HP FlexFabric 12900E Series Configuration Manual

Step
3. Advertise a default route to a
peer or peer group.

Limiting routes received from a peer or peer group

This feature can prevent attacks that send a large number of BGP routes to the router.
If the number of routes received from a peer or peer group exceeds the upper limit, the router takes
one of the following actions based on your configuration:
•
Tears down the BGP session to the peer or peer group and does not attempt to re-establish the
session.
•
Continues to receive routes from the peer or peer group and generates a log message.
•
Retains the session to the peer or peer group, but it discards excess routes and generates a log
message.
•
Tears down the BGP session to the peer or peer group and, after a specific period of time,
re-establishes a BGP session to the peer or peer group.
You can specify a percentage threshold for the router to generate a log message. When the ratio of
the number of received routes to the maximum number reaches the percentage value, the router
generates a log message.
To limit routes that a router can receive from a peer or peer group (IPv4 unicast/multicast address
family):
Step
1. Enter system view.
2. Enter
address
BGP-VPN
address family view, or BGP
IPv4 multicast address family
view.
Command
peer { group-name | ipv6-address
[
default-route-advertise
[ route-policy route-policy-name ]
Command
system-view
•
•
BGP IPv4 unicast
family view,
IPv4 unicast
•
prefix-length ]
Enter BGP IPv4 unicast
address family view:
a. bgp as-number
[ instance
instance-name
[ multi-session-thread ]
b. address-family
[ unicast ]
Enter BGP-VPN IPv4 unicast
address family view:
c. bgp as-number
[ instance
instance-name
[ multi-session-thread ]
d. ip vpn-instance
vpn-instance-name
e. address-family
[ unicast ]
Enter BGP IPv4 multicast
address family view:
f. bgp as-number
[ instance
instance-name
[ multi-session-thread ]
g. address-family
multicast
230
Remarks
} By default, no default route is
advertised.
Remarks
N/A
]
ipv4
]
N/A
ipv4
]
ipv4