Change default value of "allow as set" to false

diff --git a/doc/bird.sgml b/doc/bird.sgml
index 8c70e485c24653028e6c6909d146911b7c230896..ce0df346ed8ca54de919ace15c5a585f5bed77df 100644 (file)
--- a/doc/bird.sgml
+++ b/doc/bird.sgml
@@ -3290,7 +3290,7 @@ protocol bgp [<name>] {
        as they complicate security features like RPKI validation. When this
        option is disabled, then received AS paths with AS sets are rejected as
        malformed and corresponding BGP updates are treated as withdraws.
-       Default: on.
+       Default: off.
 
        <tag><label id="bgp-enforce-first-as">enforce first as <m/switch/</tag>
        Routes received from an EBGP neighbor are generally expected to have the

diff --git a/proto/bgp/config.Y b/proto/bgp/config.Y
index 93df8f9660ac902311b591778a478bfabd8c68a8..d73c0317c10b3a113c66576a38118d7ff04e6d5b 100644 (file)
--- a/proto/bgp/config.Y
+++ b/proto/bgp/config.Y
@@ -73,7 +73,7 @@ bgp_proto_start: proto_start BGP {
      BGP_CFG->enable_hostname = 0;
      BGP_CFG->capabilities = 2;
      BGP_CFG->interpret_communities = 1;
-     BGP_CFG->allow_as_sets = 1;
+     BGP_CFG->allow_as_sets = 0;
      BGP_CFG->default_local_pref = 100;
      BGP_CFG->gr_mode = BGP_GR_AWARE;
      BGP_CFG->gr_time = 120;