We have created peer with our ISP and my ISP send community to do backhole but how do i configure that and send community string for blackhole traffic.
ISP said use 64682:0
community for RTBH, I did following config but didn't work
router bgp 100
bgp log-neighbor-changes
redistribute static route-map RTBH
neighbor 71.xxx.xxx.61 remote-as 200
neighbor 71.xxx.xxx.61 send-community
network 70.xx.xx.0 mask 255.255.255.0
route-map RTBH permit 10
match tag 666
set community 64682:666
route-map RTBH permit 20
I am configured about :0
in community because my router not accepting that.
here i am using route to send null.
ip route 71.x.x.100 255.255.255.255 Null0 tag 666
What i am doing wrong?
EDIT:
I was following this Doc to setup community RTBH http://cenic.org/network/bgp-blackhole-community
Update:
I have modify config with following info but still no luck and no auto-summary
is default in BGP
route-map RTBH permit 10
match tag 666
set community 64682:0
set ip next-hop 192.0.2.1
!
route-map RTBH permit 20
Debug info:
When i trigger null route i got following debug debug ip routing
logs
R1#
*Jun 20 15:38:23.212: RT: updating static 70.xx.xx.1/32 (0x0) :
via 0.0.0.0 Nu0 0 1048578
*Jun 20 15:38:23.212: RT: rib update return code: 17
64682:0
, then the community in your configuration,64682:666
will not work.ASN:666
and last666
is they use formatch tag 666
so my question is, Do i need to match my tag and community last number after:
? That is why i use:666
:666
because it has an evil connotation, but you need to use what your ISP requires.RT: rib update return code: 17
I have updated my question too