BGP "Input Accept NLRI" only to accept default route?

Nightowl82 · August 25, 2025, 9:13pm

Hello,

I am currently receiving a full table from my ISP via BGP and eats a lot of memory and makes winbox painfully slow. I want to configure the router only to receive default route. A routing filer with reject, dosen't help, since the routing table still is filled up even though the routes are marked "I" and not used.

I can create a "Input Accept NLRI" firewall list, but if that list contains ::/0 or 0.0.0.0/0 I still receive the full table. If the list is empty, I don't get any prefixes, which is close to what I want, but is there a way I can configure BGP to receive only default route from my ISP?

Any suggestions, besides talk to my ISP?

atarassov · August 26, 2025, 4:45am

Hello.

.accept-nlri(string; Default: )
Name of the ipv4/6 address-list. A quick way to filter incoming updates with specific NLRIs. It allows filtering incoming messages directly before they are even parsed and stored in memory, that way significantly reducing memory usage. Regular input filter chain can only reject prefixes which means that it will still eat memory and will be visible in /routing route table as "not active, filtered". Changes to be applied required session restart.

Did you restart session?

atarassov · August 26, 2025, 4:47am

atarassov · August 26, 2025, 4:48am

this works for me
CCR2216
7.19.1

Nightowl82 · August 26, 2025, 9:18am

Out from your description everything work like I expected at least, I did some further tests now.

This is in an IPv6 only environment.

I have this IPv6-firewall list:

/ipv6 firewall address-list add list=no_full_table address="::/0"

And in the same way you add the list to the BGP.connection:

input.accept-nlri=no_full_table

If the list is completely empty I get no prefixes from the ISP

If i remove the accept-nlri alltogether I get 226 000 +++ prefixes from the ISP.

But the strange thing is when I have the "::/0" entry, i get 690-prefxes.

It does indeed block most of the routes from the ISP, but i get a lot of /128-routes. And many written in the "dual" address format:

::ffff:94.140.63.147/128
::ffff:62.181.249.12/128
2a00:d93:0:1::1/128
etc, etc...

Originating from AS 12552 (global connect)

atarassov · August 26, 2025, 9:27am

please show
/routing/route/print where gateway="gw_addr" and active

this is a bug in MikroTik NLRI filtering with /32 and /128 prefixes

Nightowl82 · August 26, 2025, 9:34am

All the prefixes are innactive due to a routing filter in addition to my NLRI-list:

/routing/route/print where gateway="[IPv6-GW address]@vrf1_dmz-vigilantes-no"

Flags: F - FILTERED; b - BGP
Columns: DST-ADDRESS, GATEWAY, AFI, ROUTING-TABLE, DISTANCE, SCOPE, TARGET-SCOPE, IMMEDIATE-GW
   DST-ADDRESS                 GATEWAY                                       AFI   ROUTING-TABLE           DISTANCE  SCOPE  TARGET-SCOPE  IMMEDIATE-GW                        
Fb ::ffff:62.181.249.6/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.12/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.13/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.16/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.76/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.78/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.198/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.199/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.200/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.204/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.205/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.210/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.211/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.218/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.249.219/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.252.28/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.252.250/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:62.181.252.251/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.16/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.17/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.20/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.21/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.22/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.23/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.160/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.168/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.169/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.170/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.176/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.177/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.178/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.179/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.228/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.229/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.240/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.241/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.242/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.243/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.244/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.245/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.246/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.247/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.248/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.242.250/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.248.247/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.248.248/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.252.230/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.2/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.3/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.4/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.5/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.8/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.9/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.12/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.13/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.15/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.20/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.32/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.33/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.39/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.46/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.51/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.54/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.55/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.66/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.67/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.68/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.69/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.82/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.83/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.136/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.137/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.138/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.139/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.141/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.144/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.145/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.182/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.183/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.212/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.213/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.214/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.215/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.224/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:83.241.255.225/128   [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.21/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.79/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.86/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.87/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.100/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.104/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.105/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.108/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.109/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.188/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.189/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.192/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.193/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.194/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.195/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.196/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.197/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.224/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.225/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.246/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.58.247/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.18/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.19/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.20/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.21/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.22/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.23/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.24/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.25/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.61/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.124/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.125/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.128/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.129/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.60.136/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.14/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.16/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.23/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.28/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.29/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.112/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.128/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.136/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.137/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.140/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.62.230/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.4/128      [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.5/128      [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.16/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.17/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.29/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.44/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.45/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.58/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.67/128     [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.128/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.129/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.130/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.131/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.132/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.133/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.135/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.136/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.137/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.138/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.141/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.142/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.143/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.144/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.145/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.146/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.147/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.148/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.149/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.150/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.151/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.155/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.156/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.157/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.158/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.160/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.161/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.163/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.164/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.167/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.169/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.170/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.171/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.172/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.173/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik
Fb ::ffff:94.140.63.174/128    [IPv6-GW address]@vrf1_dmz-vigilantes-no  ipv6  vrf1_dmz-vigilantes-no        20     40            10  [IPv6-GW address]%vlan667_janvik

(etc.etc.. to large to post entire table)

atarassov · August 26, 2025, 9:43am

690 it is not 226 000
please write to support
i have the same with ipv4

lags: X - disabled, F - filtered, U - unreachable, A - active;
c - connect, s - static, r - rip, b - bgp, o - ospf, i - isis, d - dhcp, v - vpn, m - modem, a - ldp-address, l - ldp-mapping, g - slaac, y - bgp-mpls-vpn; H - hw-offloaded; + - ecmp, B - blackhole
DST-ADDRESS
Ab 0.0.0.0/0
Ab 46.227.184.0/21
Fb 5.34.34.5/32
Fb 37.99.99.37/32
Fb 45.13.19.1/32
Fb 45.13.19.2/32
Fb 45.13.19.3/32
Fb 45.13.19.4/32
Fb 45.13.19.5/32
Fb 45.13.19.6/32
Fb 45.13.19.7/32
Fb 45.13.19.10/32
Fb 45.13.19.11/32
Fb 45.13.19.24/32
Fb 45.13.19.26/32
Fb 45.13.19.30/32

Nightowl82 · August 26, 2025, 9:44am

Will do, no 690 is manageble until the bug/problem is fixed.

Thank you for your response. .

mrz · August 26, 2025, 2:11pm

Address list will match all the host addresses (/32 ipv4 and /128 ipv6) that falls within any address range from the list.

atarassov · August 27, 2025, 4:29am

ok
uplinks announces full view, which may contains /32 or /128 from their ASes
how to filter /32 or /128 on input before they stored in memory?

Nightowl82 · August 27, 2025, 7:38am

Support says the same thing:

It is not really a bug. Address lists are designed for firewalls hence they match host addresses from the range.

v7.20 have new feature input.filter-nlri that now can use routing filters to discard nlris.

I am still not able to understand the logic here, I thought the list just functioned a list.

I will upgrade one of the core routers and test this.

Nightowl82 · August 27, 2025, 7:49am

I can indeed confirm that the ".filter-nlri=no_full_table" options work as stated in 7.20, it is not avaibale in winbox though, so you have to set it via CLI, here is our config:

/routing bgp connection add afi=ipv6 connect=yes disabled=no \
    input.accept-nlri=no_full_table .filter-nlri=no_full_table instance=bgp-instance-2 \
    local.address=2001:67c:2ff8:f667::2 .role=ebgp name=vrf1_eBGP_Janvik \
    output.filter-chain=eBGP_Janvik_export6 .network=local6 \
    .redistribute=connected,static,bgp remote.address=2001:67c:2ff8:f667::1/128 \
    .as=210475 routing-table=vrf1_dmz-vigilantes-no vrf=vrf1_dmz-vigilantes-no

atarassov · August 27, 2025, 9:41am

good news
I think it will be like as routing filters rules, but based on NLRI filtering without storing in memory