300-320 · Question #617
Refer to the exhibit You must deny your service providers from using your network as a transit AS The solution must ensure that the network remains reachable. Which AS path access list do you use in…
The correct answer is C. 13. To prevent your AS from being used as a transit, you must filter outbound BGP advertisements to only allow routes that originate within your own AS, using an AS path access list that matches locally originated prefixes.
Question
Refer to the exhibit You must deny your service providers from using your network as a transit AS The solution must ensure that the network remains reachable. Which AS path access list do you use in the localonly route map?
Exhibits
Options
- A11
- B12
- C13
- D14
How the community answered
(26 responses)- A23% (6)
- B4% (1)
- C58% (15)
- D15% (4)
Why each option
To prevent your AS from being used as a transit, you must filter outbound BGP advertisements to only allow routes that originate within your own AS, using an AS path access list that matches locally originated prefixes.
Access list 11 does not match the correct AS path pattern needed to distinguish locally originated routes from transit routes, allowing incorrect prefixes through or blocking legitimate ones.
Access list 12 matches an incorrect pattern that either permits transit routes or denies locally originated routes, failing to meet the no-transit requirement.
Access list 13 uses the AS path regex that matches only routes originating from the local AS (an empty AS path or one containing only the local AS number), which permits your own prefixes to be advertised while blocking routes learned from other ASes that would make your network a transit path.
Access list 14 uses a regex pattern that does not correctly filter AS paths to only local origination, either permitting transit traffic or breaking reachability of your own prefixes.
Concept tested: BGP AS path ACL to prevent transit AS routing
Source: https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13754-41.html
Topics
Community Discussion
No community discussion yet for this question.

