Re: route filtering in large networks

[Iljitsch van Beijnum <iljitsch () muada com>]

On Wed, 12 Mar 2003, Randy Bush wrote:

> > How would the banana eaters screw up applying the same prefix-list
> > outbound to all neighbors?

> by spending [some small part of] their time configuring routers as
> opposed to building tools to configure routers demonstratably
> correctly.

> when fingers 'touch' routers, bad things are bound to happen sooner
> or later.

Too bad at least several of our collective favorite vendors don't seem
to agree, as they don't provide very reasonable methods to update the
router configuration in an automated way. Sure, there are ways to make
it work but they are too complex to be useful in small networks.

Iljitsch

(Still waiting for vendors to support automatic filter retrieval from an
LDAP server by routers...)