159 lines
2.3 KiB
Text
159 lines
2.3 KiB
Text
log syslog all;
|
|
|
|
router id 172.23.156.4;
|
|
|
|
timeformat base iso long;
|
|
timeformat log iso long;
|
|
timeformat protocol iso long;
|
|
timeformat route iso long;
|
|
|
|
filter ibgp_export_v4 {
|
|
if net = 178.202.247.4/32 then
|
|
reject;
|
|
|
|
accept;
|
|
}
|
|
|
|
filter ibgp_export_v6 {
|
|
accept;
|
|
}
|
|
|
|
filter ibgp_import_v4 {
|
|
krt_metric = 200;
|
|
|
|
if net = 0.0.0.0/0 then reject;
|
|
|
|
accept;
|
|
}
|
|
|
|
filter ibgp_import_v6 {
|
|
krt_metric = 200;
|
|
|
|
# if net = 0::/0 then reject;
|
|
|
|
accept;
|
|
}
|
|
|
|
protocol device {
|
|
|
|
}
|
|
|
|
protocol direct {
|
|
ipv4;
|
|
ipv6;
|
|
interface "ens*", "tun*", "vpn-*";
|
|
}
|
|
|
|
protocol kernel {
|
|
ipv4 {
|
|
import all;
|
|
export where proto !~ "direct*";
|
|
};
|
|
metric 0;
|
|
learn;
|
|
}
|
|
|
|
protocol kernel {
|
|
ipv6 {
|
|
import all;
|
|
export where proto !~ "direct*";
|
|
};
|
|
metric 0;
|
|
learn;
|
|
}
|
|
|
|
protocol static {
|
|
check link yes;
|
|
|
|
route 134.61.120.0/22
|
|
via "tun0"; # ITC iDRACs
|
|
|
|
route 134.130.43.208/30
|
|
via "tun0"; # ITC deploy1-jh.itc.rwth-aachen.de
|
|
|
|
route 137.226.50.224/27
|
|
via "tun0"; # Jupyter
|
|
|
|
route 137.226.254.0/23
|
|
via "tun0"; # EONERC office network
|
|
|
|
route 134.130.48.0/24
|
|
via "tun0"; # EONERC server network
|
|
|
|
route 137.226.81.156/32
|
|
via "tun0"; # efs-itc01.eonerc.rwth-aachen.de
|
|
|
|
route 134.130.0.0/16
|
|
via 134.130.169.1
|
|
via 137.226.133.129;
|
|
|
|
route 134.61.0.0/16
|
|
via 134.130.169.1
|
|
via 137.226.133.129;
|
|
|
|
route 137.226.0.0/16
|
|
via 134.130.169.1
|
|
via 137.226.133.129;
|
|
|
|
route 192.35.229.0/24
|
|
via 134.130.169.1
|
|
via 137.226.133.129;
|
|
|
|
# lian.0l.de
|
|
route 178.202.247.4/32
|
|
via 134.130.169.1;
|
|
# via 137.226.133.129;
|
|
|
|
ipv4;
|
|
}
|
|
|
|
template bgp rr_clients {
|
|
local as 207613;
|
|
neighbor as 207613;
|
|
rr client;
|
|
rr cluster id 172.23.156.4;
|
|
|
|
ipv4 {
|
|
import keep filtered;
|
|
import filter ibgp_import_v4;
|
|
export filter ibgp_export_v4;
|
|
next hop self;
|
|
};
|
|
|
|
ipv6 {
|
|
import keep filtered;
|
|
import filter ibgp_import_v6;
|
|
export filter ibgp_export_v6;
|
|
next hop self;
|
|
};
|
|
}
|
|
|
|
protocol bgp edgy from rr_clients {
|
|
description "iBGP: edgy.int.0l.de";
|
|
|
|
local 2a09:11c0:200::6;
|
|
neighbor 2a09:11c0:200::7;
|
|
}
|
|
|
|
protocol bgp k8s_2_v4 from rr_clients {
|
|
description "iBGP: k8s-2.acs.vms.0l.de";
|
|
|
|
local 172.23.156.6;
|
|
neighbor 172.23.156.130;
|
|
|
|
ipv4 {
|
|
export none;
|
|
};
|
|
}
|
|
|
|
protocol bgp k8s_2_v6 from rr_clients {
|
|
description "iBGP: k8s-2.acs.vms.0l.de";
|
|
|
|
local 2a09:11c0:200::6;
|
|
neighbor 2a09:11c0:200:103:f0f4:8dff:fed4:d18d;
|
|
|
|
ipv6 {
|
|
export none;
|
|
};
|
|
}
|
|
|