traffic diversion when attack starts.

syjeon · ‎02-17-2009

I would like to configure like attached ppt file,

check the scenerio and configure procedure,

Giuseppe Larosa · ‎02-17-2009

Hello Seungyeop,

to perform actually diversion some router needs to change the BGP next-hop attribute.

What you can implement is that GD or MSFC colocated with MSFC sends out advertisement with BGP community specified.

When the route is added with a specific BGP community the border router to perform diversion needs to set a different BGP next-hop that of ER router.

something like

route-map selected-diversion permit 10

match community 10

set ip next-hop er-ip-addr

Hope to help

Giuseppe

syjeon · ‎02-17-2009

thank for your opinion.

but in BGP, we must advertise GD's 32 host routing to ER as network, redi.

However, in R1, We don't know static route received from GD, so we can't network advertisement to R1, and redi it's not solution.

regarding your configuration. Can I advertise only community-list using route-map to announce ER?