gitolite/c3d2-wiki
gitolite
/
c3d2-wiki
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

/* Erweiterte BGP-Konfiguration */

This commit is contained in:
Astro 2007-07-05 23:30:03 +00:00
parent a80acc14b0
commit 3406bbfdf2
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
C3D2VPN.mw
View File

@ -360,6 +360,26 @@ bgpd -df .../bgpd.conf # starten
echo "Here we go!"
</nowiki></pre>
==Erweiterte BGP-Konfiguration==
===prefix-lists===
Wir filtern eingehende Routen, damit uns nicht jeder Peer den eigenen Traffic umleiten kann (je einmal in der ''router''- und in der ''address-family''-Konfiguration):
neighbor fe80::f00 prefix-list vpn-in in
Diese Listen müssen auch noch angelegt werden, das geschieht in direkt im ''configure terminal''. Beispielkonfiguration:
<pre><nowiki>ip prefix-list diac-in seq 10 permit 172.16.0.0/12 ge 18
ip prefix-list diac-in seq 40 permit 195.16.84.0/22 le 32
ip prefix-list diac-in seq 100 deny 0.0.0.0/0 le 32
ip prefix-list diac-out seq 10 permit 172.16.0.0/12 ge 20
ip prefix-list diac-out seq 40 permit 195.16.84.0/22 le 32
ip prefix-list diac-out seq 100 deny 0.0.0.0/0
!
ipv6 prefix-list diac-in seq 10 permit 2000::/3 ge 16
ipv6 prefix-list diac-in seq 100 deny ::/0 le 128
ipv6 prefix-list diac-out seq 10 permit 2000::/3 le 128
ipv6 prefix-list diac-out seq 100 deny ::/0
</nowiki></pre>
=TODO=
Was hier fehlt:
* prefix-lists zum Filtern von Routen