On Fri, Mar 01, 2013 at 08:52:09PM +0000, Chris Smith wrote:
I am also putting in an additional check to ensure the tunnel endpoint is outside 44/8 as well as bogon / un-routable networks.
When the BGP-routed subnets start supplying tunnels to their clients both the destination network and the tunnel origin endpoint will be in network 44 space. Validation will be a bit more complex. - Brian