?
Solved

BGP advertised networks

Posted on 2014-03-27
1
Medium Priority
?
322 Views
Last Modified: 2014-04-08
I have a private 10.10.0.0/16 subnet. That subnet is further extend to 25 /24 subnets within my internal network. My WAN is a MPLS network. My FW is doing BGP peering with the provider MPLS router.
Should I advertise a /16 or 25 /24 with the network statement.

Somebody told me, for security purposes, that I should advertise individual specific routes rather than a /16. I am not sure I agree with that. But I'd like to get your thought on this.

Thanks
0
Comment
Question by:leblanc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 17

Accepted Solution

by:
pergr earned 2000 total points
ID: 39960932
If all those networks are on the same site, and you use a single router, and no other site is using networks within 10.10/16 - then you can advertise the /16.

It has nothing to do with security.

Only reason to use /24 is if you want to load balance different /24 to different links.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses
Course of the Month14 days, 22 hours left to enroll

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question