nanog mailing list archives
RE: Juniper configuration recommendations/BCP
From: <adamv0025 () netconsultings com>
Date: Mon, 12 Oct 2020 15:06:05 +0100
Here's a fun one. By default Junos accepts extended communities on any BGP session (not just on MP-BGP sessions like it's the default case on cisco -unless explicitly enabled). Since most operators are not aware of this default Junos behaviour, one can be importing routes to interesting places if one were so inclined. -so yeah bleach unwanted communities on ingress (bleach those that would interfere with the ones used by the AS internally -so called "untaggable"/"untouchable" ). adam
-----Original Message----- From: NANOG <nanog- bounces+adamv0025=netconsultings.com () nanog org> On Behalf Of Chriztoffer Hansen Sent: Thursday, October 8, 2020 11:05 AM To: nanog () nanog org Subject: Juniper configuration recommendations/BCP Importance: Low On 08/10/2020 11:37, Forrest Christian (List Account) wrote:Is there anything I should worry about which is Juniper-specific?JUNOS default ARP timeout: 20 min. If you connect to IXP's. Recommended ARP timeout: 4 hours.
Current thread:
- Juniper configuration recommendations/BCP Forrest Christian (List Account) (Oct 08)
- Juniper configuration recommendations/BCP Chriztoffer Hansen (Oct 08)
- RE: Juniper configuration recommendations/BCP adamv0025 (Oct 12)
- RE: [EXTERNAL] Juniper configuration recommendations/BCP Mann, Jason via NANOG (Oct 08)
- Re: [EXTERNAL] Juniper configuration recommendations/BCP Pierre LANCASTRE (Oct 08)
- Re: Juniper configuration recommendations/BCP Justin Oeder (Oct 08)
- Re: Juniper configuration recommendations/BCP Paschal Masha (Oct 09)
- Re: Juniper configuration recommendations/BCP Forrest Christian (List Account) (Oct 08)
- Re: Juniper configuration recommendations/BCP Paschal Masha (Oct 09)
- Re: Juniper configuration recommendations/BCP Casey Russell via NANOG (Oct 08)
- RE: Juniper configuration recommendations/BCP aaron1 (Oct 08)
- RE: Juniper configuration recommendations/BCP aaron1 (Oct 08)
- RE: Juniper configuration recommendations/BCP aaron1 (Oct 08)
- Re: Juniper configuration recommendations/BCP Chris Boyd (Oct 08)
- RE: Juniper configuration recommendations/BCP aaron1 (Oct 08)
(Thread continues...)
- Juniper configuration recommendations/BCP Chriztoffer Hansen (Oct 08)