Re: 10-space is L..A..R..G..E (was Re: Large edu's doing NAT campus wide?

[Jeff Kell <jeff-kell () UTC EDU>]

Buz Dale wrote:
> Maybe instead of using the whole 10.0.0.0 you only route the smaller
> class "c"s that are assigned.  Then you could drop anything to or from
> the address ranges that aren't assigned.

Precisely.  Install a lowest-priority static null route to 10.0.0.0/8 at your core.  Actual live, legitimately 
advertised subnets will override the null.  Rogues go in the bit bucket.

Jeff