?
Solved

BGP advertised networks

Posted on 2014-03-27
1
Medium Priority
?
329 Views
Last Modified: 2014-04-08
I have a private 10.10.0.0/16 subnet. That subnet is further extend to 25 /24 subnets within my internal network. My WAN is a MPLS network. My FW is doing BGP peering with the provider MPLS router.
Should I advertise a /16 or 25 /24 with the network statement.

Somebody told me, for security purposes, that I should advertise individual specific routes rather than a /16. I am not sure I agree with that. But I'd like to get your thought on this.

Thanks
0
Comment
Question by:leblanc
1 Comment
 
LVL 17

Accepted Solution

by:
pergr earned 2000 total points
ID: 39960932
If all those networks are on the same site, and you use a single router, and no other site is using networks within 10.10/16 - then you can advertise the /16.

It has nothing to do with security.

Only reason to use /24 is if you want to load balance different /24 to different links.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question