diff options
| author | Daniel Walton <dwalton@cumulusnetworks.com> | 2015-10-20 23:57:09 +0200 |
|---|---|---|
| committer | Daniel Walton <dwalton@cumulusnetworks.com> | 2015-10-20 23:57:09 +0200 |
| commit | 5623e905f2812201b5efeb4b780e9c0ed83c31ee (patch) | |
| tree | 7b3978242b114070c1a43aca0b5dd86768c3f310 /bgpd/bgp_nht.c | |
| parent | Do not allow a timers connect of 0, this can hammer the CPU (diff) | |
| download | frr-5623e905f2812201b5efeb4b780e9c0ed83c31ee.tar.xz frr-5623e905f2812201b5efeb4b780e9c0ed83c31ee.zip | |
Enable "bgp network import-check exact" by default. Without this it is
very easy to blackhole routes.
Signed-off-by: Daniel Walton <dwalton@cumulusnetworks.com>
Reviewed-by: Donald Sharp <sharpd@cumulusnetworks.com>
Ticket: CM-6649
Diffstat (limited to 'bgpd/bgp_nht.c')
| -rw-r--r-- | bgpd/bgp_nht.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/bgpd/bgp_nht.c b/bgpd/bgp_nht.c index ab4effcb1..70a430962 100644 --- a/bgpd/bgp_nht.c +++ b/bgpd/bgp_nht.c @@ -175,14 +175,14 @@ bgp_find_or_add_nexthop (struct bgp *bgp, afi_t afi, struct bgp_info *ri, SET_FLAG(bnc->flags, BGP_STATIC_ROUTE); /* If we're toggling the type, re-register */ - if ((bgp_flag_check(bgp, BGP_FLAG_IMPORT_CHECK_EXACT_MATCH)) && + if ((bgp_flag_check(bgp, BGP_FLAG_IMPORT_CHECK)) && !CHECK_FLAG(bnc->flags, BGP_STATIC_ROUTE_EXACT_MATCH)) { SET_FLAG(bnc->flags, BGP_STATIC_ROUTE_EXACT_MATCH); UNSET_FLAG(bnc->flags, BGP_NEXTHOP_REGISTERED); UNSET_FLAG(bnc->flags, BGP_NEXTHOP_VALID); } - else if ((!bgp_flag_check(bgp, BGP_FLAG_IMPORT_CHECK_EXACT_MATCH)) && + else if ((!bgp_flag_check(bgp, BGP_FLAG_IMPORT_CHECK)) && CHECK_FLAG(bnc->flags, BGP_STATIC_ROUTE_EXACT_MATCH)) { UNSET_FLAG(bnc->flags, BGP_STATIC_ROUTE_EXACT_MATCH); |