This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block routing of RFC 1918 private IP addresses out the default gateway?

Example: IP Address 10.20.1.100

This IP address is in the private IP address space, as defined in RFC 1918. We have no devices configured with this IP address, we don't even use this subnet. Any attempt to reach this IP should be impossible. Yet, this IP is pingable. A tracert shows that it is routing through our Charter Circuit.

If we were on Cisco, I could stop this by routing unused private IP traffic to the Null0 interface. What approach would this community suggest I take on the XG?

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

ITCellworld,

a null interface does not exist inside XG at the moment (hope in the future). What you can do is to create a Firewall Rule where you deny traffic goinging and coming from that network.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 8 years ago

ITCellworld,

a null interface does not exist inside XG at the moment (hope in the future). What you can do is to create a Firewall Rule where you deny traffic goinging and coming from that network.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 MarcoScholl over 8 years ago in reply to lferrara

yes i have also ask for an blackhole rule in beta forum.
Cancel
Vote Up 0 Vote Down

Cancel