2019-02-14 15:24:08 -06:00
|
|
|
!!# this file is dynamic and managed by wit-network-config, any changes will be lost
|
|
|
|
|
|
2018-07-26 03:57:41 -05:00
|
|
|
frr defaults datacenter
|
|
|
|
|
username cumulus nopassword
|
|
|
|
|
!
|
|
|
|
|
service integrated-vtysh-config
|
|
|
|
|
!
|
2019-03-18 17:58:00 -05:00
|
|
|
log syslog
|
2018-07-26 03:57:41 -05:00
|
|
|
!
|
|
|
|
|
interface feth1
|
|
|
|
|
ipv6 nd ra-interval 10
|
|
|
|
|
no ipv6 nd suppress-ra
|
|
|
|
|
!
|
|
|
|
|
interface feth2
|
|
|
|
|
ipv6 nd ra-interval 10
|
|
|
|
|
no ipv6 nd suppress-ra
|
|
|
|
|
!
|
2018-10-16 15:44:57 -05:00
|
|
|
!!! FRR_IFS
|
|
|
|
|
!
|
2018-07-28 13:47:08 -05:00
|
|
|
router bgp NODEASN
|
|
|
|
|
bgp router-id FRRROUTERID
|
2019-02-05 21:16:03 -06:00
|
|
|
bgp log-neighbor-changes
|
2018-07-26 03:57:41 -05:00
|
|
|
no bgp default ipv4-unicast
|
2019-02-05 21:16:03 -06:00
|
|
|
bgp default show-hostname
|
|
|
|
|
bgp deterministic-med
|
2018-07-26 03:57:41 -05:00
|
|
|
coalesce-time 1000
|
|
|
|
|
bgp bestpath as-path multipath-relax
|
|
|
|
|
bgp bestpath compare-routerid
|
2019-02-05 21:16:03 -06:00
|
|
|
bgp network import-check
|
|
|
|
|
timers bgp 3 9
|
2018-07-26 03:57:41 -05:00
|
|
|
neighbor fabric peer-group
|
|
|
|
|
neighbor fabric remote-as external
|
2019-02-05 21:16:03 -06:00
|
|
|
neighbor fabric timers connect 10
|
2018-07-26 03:57:41 -05:00
|
|
|
neighbor feth1 interface peer-group fabric
|
|
|
|
|
neighbor feth2 interface peer-group fabric
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor GRE peer-group
|
|
|
|
|
!!! neighbor GRE remote-as external
|
2018-10-20 10:51:53 -05:00
|
|
|
!!! neighbor GRE local-as FRR_GRE_ASN
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor GRE password wIt2Go
|
|
|
|
|
!!! neighbor GRE ebgp-multihop 255
|
2019-02-05 21:16:03 -06:00
|
|
|
!!! neighbor GRE timers connect 10
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor eBGPv4 peer-group
|
|
|
|
|
!!! neighbor eBGPv4 remote-as external
|
2019-02-05 21:16:03 -06:00
|
|
|
!!! neighbor eBGPv4 timers connect 10
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor eBGPv6 peer-group
|
|
|
|
|
!!! neighbor eBGPv6 remote-as external
|
2019-02-05 21:16:03 -06:00
|
|
|
!!! neighbor eBGPv6 timers connect 10
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor iBGP peer-group
|
|
|
|
|
!!! neighbor iBGP remote-as internal
|
2019-02-05 21:16:03 -06:00
|
|
|
!!! neighbor iBGP timers connect 10
|
2018-12-19 16:53:35 -06:00
|
|
|
!!! neighbor CUSTOMERv4 peer-group
|
|
|
|
|
!!! neighbor CUSTOMERv4 remote-as external
|
2019-02-05 21:16:03 -06:00
|
|
|
!!! neighbor CUSTOMERv4 timers connect 10
|
2018-12-19 16:53:35 -06:00
|
|
|
!!! neighbor CUSTOMERv6 peer-group
|
|
|
|
|
!!! neighbor CUSTOMERv6 remote-as external
|
2019-02-05 21:16:03 -06:00
|
|
|
!!! neighbor CUSTOMERv6 timers connect 10
|
2018-10-19 10:03:43 -05:00
|
|
|
!!! FRR_EDGE_NEIGH
|
2018-07-26 03:57:41 -05:00
|
|
|
!
|
|
|
|
|
address-family ipv4 unicast
|
2018-09-09 13:06:05 -05:00
|
|
|
redistribute kernel route-map EIPv4
|
|
|
|
|
redistribute connected route-map LOCALNETSv4
|
2018-07-26 03:57:41 -05:00
|
|
|
neighbor fabric activate
|
|
|
|
|
neighbor fabric soft-reconfiguration inbound
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor fabric default-originate
|
2018-10-23 10:39:54 -05:00
|
|
|
!!! neighbor fabric route-map FABRICv4-OUT out
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor GRE activate
|
|
|
|
|
!!! neighbor GRE default-originate
|
|
|
|
|
!!! neighbor GRE soft-reconfiguration inbound
|
|
|
|
|
!!! neighbor GRE allowas-in 1
|
|
|
|
|
!!! neighbor GRE route-map GREv4-IN in
|
|
|
|
|
!!! neighbor GRE route-map FABRICv4-OUT out
|
|
|
|
|
!!! neighbor eBGPv4 activate
|
|
|
|
|
!!! neighbor eBGPv4 next-hop-self
|
|
|
|
|
!!! neighbor eBGPv4 remove-private-AS
|
|
|
|
|
!!! neighbor eBGPv4 soft-reconfiguration inbound
|
|
|
|
|
!!! neighbor eBGPv4 route-map eBGPv4-IN in
|
|
|
|
|
!!! neighbor eBGPv4 route-map eBGPv4-OUT out
|
|
|
|
|
!!! neighbor iBGP activate
|
|
|
|
|
!!! neighbor iBGP next-hop-self
|
|
|
|
|
!!! neighbor iBGP soft-reconfiguration inbound
|
2018-10-23 11:27:55 -05:00
|
|
|
!!! neighbor iBGP allowas-in 1
|
2018-12-19 16:53:35 -06:00
|
|
|
!!! neighbor CUSTOMERv4 activate
|
|
|
|
|
!!! neighbor CUSTOMERv4 next-hop-self
|
|
|
|
|
!!! neighbor CUSTOMERv4 remove-private-AS
|
|
|
|
|
!!! neighbor CUSTOMERv4 soft-reconfiguration inbound
|
|
|
|
|
!!! neighbor CUSTOMERv4 route-map CUSTOMERv4-IN in
|
|
|
|
|
!!! neighbor CUSTOMERv4 route-map eBGPv4-IN out
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! FRR_IPV4_EDGE_SUMMARIES_AGGREGATS
|
2018-07-26 03:57:41 -05:00
|
|
|
exit-address-family
|
|
|
|
|
!
|
|
|
|
|
address-family ipv6 unicast
|
|
|
|
|
redistribute kernel route-map EIPv6
|
2018-09-09 13:06:05 -05:00
|
|
|
redistribute connected route-map LOCALNETSv6
|
2018-07-26 03:57:41 -05:00
|
|
|
neighbor fabric activate
|
|
|
|
|
neighbor fabric soft-reconfiguration inbound
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor fabric default-originate
|
|
|
|
|
!!! neighbor fabric route-map FABRICv6-OUT out
|
|
|
|
|
!!! neighbor GRE activate
|
|
|
|
|
!!! neighbor GRE default-originate
|
|
|
|
|
!!! neighbor GRE soft-reconfiguration inbound
|
|
|
|
|
!!! neighbor GRE allowas-in 1
|
|
|
|
|
!!! neighbor GRE route-map GREv6-IN in
|
|
|
|
|
!!! neighbor GRE route-map FABRICv6-OUT out
|
|
|
|
|
!!! neighbor eBGPv6 activate
|
|
|
|
|
!!! neighbor eBGPv6 soft-reconfiguration inbound
|
2018-11-15 14:05:45 -06:00
|
|
|
!!! neighbor eBGPv6 remove-private-AS
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor eBGPv6 route-map eBGPv6-IN in
|
|
|
|
|
!!! neighbor eBGPv6 route-map eBGPv6-OUT out
|
|
|
|
|
!!! neighbor iBGP activate
|
|
|
|
|
!!! neighbor iBGP next-hop-self
|
|
|
|
|
!!! neighbor iBGP soft-reconfiguration inbound
|
2018-10-23 11:27:55 -05:00
|
|
|
!!! neighbor iBGP allowas-in 1
|
2018-12-19 16:53:35 -06:00
|
|
|
!!! neighbor CUSTOMERv6 activate
|
|
|
|
|
!!! neighbor CUSTOMERv6 next-hop-self
|
|
|
|
|
!!! neighbor CUSTOMERv6 remove-private-AS
|
|
|
|
|
!!! neighbor CUSTOMERv6 soft-reconfiguration inbound
|
|
|
|
|
!!! neighbor CUSTOMERv6 route-map CUSTOMERv6-IN in
|
|
|
|
|
!!! neighbor CUSTOMERv6 route-map eBGPv6-IN out
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! FRR_IPV6_EDGE_SUMMARIES_AGGREGATS
|
2018-07-26 03:57:41 -05:00
|
|
|
exit-address-family
|
|
|
|
|
!
|
|
|
|
|
address-family l2vpn evpn
|
2018-10-18 15:12:43 -05:00
|
|
|
!!! neighbor GRE activate
|
|
|
|
|
!!! neighbor GRE allowas-in 1
|
2018-07-26 03:57:41 -05:00
|
|
|
neighbor fabric activate
|
|
|
|
|
advertise-all-vni
|
|
|
|
|
exit-address-family
|
|
|
|
|
!
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! FRR_IPV4_LOOPBACK_PFLIST
|
2018-10-18 15:12:43 -05:00
|
|
|
|
|
|
|
|
!!! FRR_IPV4_EDGE_SUMMARIES_PFLIST
|
|
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! FRR_IPV4_CUSTOMERS_PFLIST
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-12-19 17:01:59 -06:00
|
|
|
!!!PEERCUSTOMER FRR_IPV4_PEERCUSTOMERS_PFLIST
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-11-13 10:22:42 -06:00
|
|
|
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
|
|
|
|
|
ip prefix-list ALL seq 5 permit 0.0.0.0/0 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 5 permit 0.0.0.0/8 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 10 permit 10.0.0.0/8 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 15 permit 127.0.0.0/8 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 20 permit 169.254.0.0/16 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 25 permit 172.16.0.0/12 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 30 permit 192.168.0.0/16 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 35 permit 224.0.0.0/3 le 32
|
|
|
|
|
ip prefix-list rfc1918 seq 40 permit 100.64.0.0/10 le 32
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-11-19 11:35:11 -06:00
|
|
|
!!BASTION ip prefix-list BASTION seq 5 permit BASTION-PUBLIC-IP/32
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! FRR_IPV6_LOOPBACK_PFLIST
|
2018-10-18 15:12:43 -05:00
|
|
|
|
|
|
|
|
!!! FRR_IPV6_EDGE_SUMMARIES_PFLIST
|
|
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! FRR_IPV6_CUSTOMERS_PFLIST
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-12-19 17:01:59 -06:00
|
|
|
!!!PEERCUSTOMER FRR_IPV6_PEERCUSTOMERS_PFLIST
|
2018-12-19 16:53:35 -06:00
|
|
|
|
2018-11-13 10:22:42 -06:00
|
|
|
ipv6 prefix-list DEFAULT seq 5 permit ::/0
|
|
|
|
|
ipv6 prefix-list ALL seq 5 permit ::/0 le 128
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 5 deny 3ffe::/16 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 10 deny 2001:db8::/32 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 15 permit 2001::/32
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 20 deny 2001::/32 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 25 permit 2002::/16
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 30 deny 2002::/16 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 35 deny ::/8 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 40 deny fe00::/9 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 45 deny ff00::/8 le 128
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 50 permit 2000::/3 le 48
|
|
|
|
|
!!! ipv6 prefix-list eBGPv6-RELAXED seq 55 deny ::/0 le 128
|
2018-10-18 15:12:43 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2018-09-09 13:06:05 -05:00
|
|
|
route-map EIPv4 permit 5
|
2018-10-18 15:12:43 -05:00
|
|
|
match ip address prefix-list WITv4-CUSTOMERS
|
2018-09-09 13:06:05 -05:00
|
|
|
!
|
2018-07-26 03:57:41 -05:00
|
|
|
route-map EIPv6 permit 5
|
2018-10-18 15:12:43 -05:00
|
|
|
match ipv6 address prefix-list WITv6-CUSTOMERS
|
2018-07-26 03:57:41 -05:00
|
|
|
!
|
2018-10-18 15:12:43 -05:00
|
|
|
|
2018-09-09 13:06:05 -05:00
|
|
|
route-map LOCALNETSv4 permit 5
|
2018-07-26 03:57:41 -05:00
|
|
|
description "permit loopback ips"
|
2018-10-18 15:12:43 -05:00
|
|
|
match ip address prefix-list LOOPBACKv4
|
2018-11-19 11:35:11 -06:00
|
|
|
|
|
|
|
|
!!BASTION route-map LOCALNETSv4 permit 10
|
|
|
|
|
!!BASTION description permit bastion public loopback ip
|
|
|
|
|
!!BASTION match ip address prefix-list BASTION
|
|
|
|
|
|
2018-09-09 13:06:05 -05:00
|
|
|
route-map LOCALNETSv6 permit 5
|
2018-07-26 03:57:41 -05:00
|
|
|
description "permit ipv6 loopback ips"
|
2018-10-18 15:12:43 -05:00
|
|
|
match ipv6 address prefix-list LOOPBACKv6
|
2018-12-06 11:57:32 -06:00
|
|
|
|
|
|
|
|
!!BASTION route-map LOCALNETSv6 permit 10
|
|
|
|
|
!!BASTION description permit bastion mgmt ip
|
|
|
|
|
!!BASTION match ipv6 address prefix-list MGMT
|
2018-10-16 15:44:57 -05:00
|
|
|
|
|
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! route-map eBGPv4-IN deny 5
|
|
|
|
|
!!! description "deny any incoming private IP blocks"
|
|
|
|
|
!!! match ip address prefix-list rfc1918
|
|
|
|
|
!!! !
|
|
|
|
|
!!! route-map eBGPv4-IN permit 10
|
|
|
|
|
!!! description "Accept all routes advertised to us"
|
|
|
|
|
!!! match ip address prefix-list ALL
|
|
|
|
|
!!! !
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map eBGPv4-OUT permit 5
|
|
|
|
|
!!! description "match IP block owned by WIT"
|
|
|
|
|
!!! match ip address prefix-list WITv4-SUMMARIES
|
|
|
|
|
!!! !
|
2018-12-19 16:53:35 -06:00
|
|
|
!!! route-map eBGPv4-OUT permit 10
|
|
|
|
|
!!! match ip address prefix-list PEERv4-CUSTOMER
|
|
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map eBGPv6-IN permit 5
|
|
|
|
|
!!! description "Accept all routes advertised to us"
|
|
|
|
|
!!! match ipv6 address prefix-list eBGPv6-RELAXED
|
|
|
|
|
!!! !
|
2019-02-14 05:25:27 -06:00
|
|
|
!!! route-map eBGPv6-IN permit 10
|
|
|
|
|
!!! description "Accept default route"
|
|
|
|
|
!!! match ipv6 address prefix-list DEFAULT
|
|
|
|
|
!!! !
|
2018-10-19 09:56:11 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map eBGPv6-OUT permit 5
|
|
|
|
|
!!! description "match IP block owned by WIT"
|
|
|
|
|
!!! match ipv6 address prefix-list WITv6-SUMMARIES
|
|
|
|
|
!!! !
|
2018-12-19 16:53:35 -06:00
|
|
|
!!! route-map eBGPv6-OUT permit 10
|
|
|
|
|
!!! match ipv6 address prefix-list PEERv6-CUSTOMER
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map CUSTOMERv4-IN permit 5
|
|
|
|
|
!!! description "match IP block expected from Customer"
|
|
|
|
|
!!! match ip address prefix-list PEERv4-CUSTOMER
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map CUSTOMERv6-IN permit 5
|
|
|
|
|
!!! description "match IP block expected from Customer"
|
|
|
|
|
!!! match ipv6 address prefix-list PEERv6-CUSTOMER
|
|
|
|
|
|
2018-10-19 09:56:11 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map FABRICv4-OUT permit 5
|
|
|
|
|
!!! description "allow default route"
|
|
|
|
|
!!! match ip address prefix-list DEFAULT
|
|
|
|
|
!!! !
|
|
|
|
|
!!! route-map FABRICv4-OUT permit 10
|
2018-10-19 12:57:07 -05:00
|
|
|
!!! description "allow WIT customer IPs"
|
|
|
|
|
!!! match ip address prefix-list WITv4-CUSTOMERS
|
2018-10-19 09:56:11 -05:00
|
|
|
!!! !
|
2018-10-20 10:51:53 -05:00
|
|
|
!!! route-map FABRICv4-OUT permit 15
|
|
|
|
|
!!! description "allow WIT loopback IPs"
|
|
|
|
|
!!! match ip address prefix-list LOOPBACKv4
|
|
|
|
|
!!! !
|
2018-10-19 09:56:11 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map FABRICv6-OUT permit 5
|
|
|
|
|
!!! description "allow default route"
|
|
|
|
|
!!! match ipv6 address prefix-list DEFAULT
|
|
|
|
|
!!! !
|
|
|
|
|
!!! route-map FABRICv6-OUT permit 10
|
|
|
|
|
!!! description "allow WIT customer IPs"
|
|
|
|
|
!!! match ipv6 address prefix-list WITv6-CUSTOMERS
|
|
|
|
|
!!! !
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map GREv4-IN deny 5
|
|
|
|
|
!!! description "deny default route in"
|
|
|
|
|
!!! match ip address prefix-list DEFAULT
|
|
|
|
|
!!! !
|
|
|
|
|
!!! route-map GREv4-IN permit 10
|
|
|
|
|
!!! description "accept all the rest"
|
|
|
|
|
!!! match ip address prefix-list ALL
|
|
|
|
|
!!! !
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
!!! route-map GREv6-IN deny 5
|
|
|
|
|
!!! description "deny default route in"
|
|
|
|
|
!!! match ipv6 address prefix-list DEFAULT
|
|
|
|
|
!!! !
|
|
|
|
|
!!! route-map GREv6-IN permit 10
|
|
|
|
|
!!! description "accept all the rest"
|
|
|
|
|
!!! match ipv6 address prefix-list ALL
|
|
|
|
|
!!! !
|
2018-11-04 14:02:07 -06:00
|
|
|
|
|
|
|
|
|
2019-02-04 20:09:28 -06:00
|
|
|
!!BASTION route-map BASTIONv4 permit 5
|
2018-11-19 11:35:11 -06:00
|
|
|
!!BASTION match ip address prefix-len 0
|
|
|
|
|
!!BASTION set src BASTION-PUBLIC-IP
|
|
|
|
|
|
2019-02-04 20:09:28 -06:00
|
|
|
!!BASTION route-map BASTIONv4 permit 10
|
2018-11-19 11:35:11 -06:00
|
|
|
!!BASTION match ip address prefix-list ALL
|
|
|
|
|
|
2019-02-04 20:09:28 -06:00
|
|
|
!!BASTION ip protocol bgp route-map BASTIONv4
|
2018-11-04 14:02:07 -06:00
|
|
|
|
2019-02-04 20:09:28 -06:00
|
|
|
!!BASTION route-map BASTIONv6 permit 5
|
|
|
|
|
!!BASTION match ipv6 address prefix-list ALL
|
|
|
|
|
!!BASTION set src LOOPBACK-IPV6
|
|
|
|
|
|
|
|
|
|
!!BASTION ipv6 protocol bgp route-map BASTIONv6
|
2018-11-04 14:02:07 -06:00
|
|
|
|
2018-10-16 15:44:57 -05:00
|
|
|
!
|
2018-07-26 03:57:41 -05:00
|
|
|
line vty
|
|
|
|
|
!
|
