nerdexam
Cisco

300-320 · Question #617

Refer to the exhibit You must deny your service providers from using your network as a transit AS The solution must ensure that the network remains reachable. Which AS path access list do you use in…

The correct answer is C. 13. To prevent your AS from being used as a transit, you must filter outbound BGP advertisements to only allow routes that originate within your own AS, using an AS path access list that matches locally originated prefixes.

Advanced Addressing and Routing Solutions

Question

Refer to the exhibit You must deny your service providers from using your network as a transit AS The solution must ensure that the network remains reachable. Which AS path access list do you use in the localonly route map?

Exhibits

300-320 question #617 exhibit 1
300-320 question #617 exhibit 2

Options

  • A11
  • B12
  • C13
  • D14

How the community answered

(26 responses)
  • A
    23% (6)
  • B
    4% (1)
  • C
    58% (15)
  • D
    15% (4)

Why each option

To prevent your AS from being used as a transit, you must filter outbound BGP advertisements to only allow routes that originate within your own AS, using an AS path access list that matches locally originated prefixes.

A11

Access list 11 does not match the correct AS path pattern needed to distinguish locally originated routes from transit routes, allowing incorrect prefixes through or blocking legitimate ones.

B12

Access list 12 matches an incorrect pattern that either permits transit routes or denies locally originated routes, failing to meet the no-transit requirement.

C13Correct

Access list 13 uses the AS path regex that matches only routes originating from the local AS (an empty AS path or one containing only the local AS number), which permits your own prefixes to be advertised while blocking routes learned from other ASes that would make your network a transit path.

D14

Access list 14 uses a regex pattern that does not correctly filter AS paths to only local origination, either permitting transit traffic or breaking reachability of your own prefixes.

Concept tested: BGP AS path ACL to prevent transit AS routing

Source: https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13754-41.html

Topics

#BGP AS path filtering#transit AS prevention#route maps#BGP policy

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice