Hello,
We recently replaced our BGP router with a CCR2116 on v7.16.1
At the moment we only have a single provider, so we only want to advertise our own prefixes.
I have create an address list with a single entry (0.0.0.0/0) which is referred to in “Input Accept NLRI” of the BGP connection.
I used to get close to a million routes, but now I still get about 3300 routes.
Anyone have any suggestions?
Thanks!
/32 routes?
on address list 0.0.0.0/0 = everything… so…
if you want match EXACTLY 0.0.0.0/0 (accept only default route, if is transmitted…), use filter
if (dst == 0.0.0.0/0) { accept }
Yes. They are all /32.
Is this a known problem? Can I do something about this?
Thanks!
In the input filter I have this: if (dst==0.0.0.0/0) {accept} else {reject}
So all routes are in fact marked with DFbI. So inactive, but still loaded. I was expecting them to be discarded by the NRLI filter.
From post nr 190117:
…For everyone facing the same issue, i did further testing and Mikrotik support just confirmed:
The exact match is actually working, but has a bug to match on /32 subnets as well.
So I suppose the passing of the /32 is a bug.
Thanks.
Address lists are designed to match host addresses in subnets, for firewall and other similar places. So yes, currently it is a side-effect when using address lists to match only subnets.