Juniper DOS/Blackhole question
saku at ytti.fi
Sun Oct 23 07:18:58 UTC 2011
On (2011-10-22 20:38 -0500), Jack Bates wrote:
> the route. This seems strange to me. Any idea why a route would be
> rejected unless multihop was enabled?
- By default (if none of the above conditions apply), the BGP
speaker SHOULD use the IP address of the interface that the
speaker uses to establish the BGP connection to peer X in the
Your provider was rewriting the next-hop to some address they are blackholing
inside their network. This caused above check to fail, and route was being
EBGP multihop is kludge to kill this check, but also kludge to kill convergence
of your BGP session, due to disabling fall over on linkdown.
Proper way to disable this check is JunOS 'accept-remote-nexthop' or IOS
More information about the NANOG