Question 260
A BGP import filter includes a regular expression for customer AS paths. Observed: The filter matches unrelated longer AS-path sequences and rejects legitimate traffic. What operational check best guards against this problem returning?
Explanation
Correct Answer
This control asks for the same recovery evidence (Only the intended AS-path patterns trigger the route filter) and flags recurrence of the same failure (The filter matches unrelated longer AS-path sequences and rejects legitimate traffic). It targets the underlying issue, the regex was not anchored to the intended as path boundaries, rather than a different service problem. The exact cadence must be agreed with operations.
Incorrect Answers
This gate monitors a different failure, the ipv4 bgp session is established but ipv6 route exchange never starts. It would not detect the current problem: The filter matches unrelated longer AS-path sequences and rejects legitimate traffic. The appropriate check requires only the intended AS-path patterns trigger the route filter.
The proposed control is tied to as-loop prevention correctly rejects a path containing the local autonomous system, typically observed when the next router drops it because its own AS is present in the path. Here the target is the regex was not anchored to the intended as path boundaries; monitor only the intended AS-path patterns trigger the route filter.
It is valid for another service scenario but checks policy unexpectedly modifies med for every customer route. This case instead needs a gate for the filter matches unrelated longer as-path sequences and rejects legitimate traffic and evidence that only the intended AS-path patterns trigger the route filter.