5246c347b4ac896a4efcce8a4bd072b15827e2b8
howto/vyos1.4.x.md
... | ... | @@ -191,6 +191,7 @@ set protocols bgp parameters router-id '172.20.20.1' |
191 | 191 | |
192 | 192 | ### Neighbor Up With Peers |
193 | 193 | #### Option 1: MP-BGP (with Multi Protocol) - with Extended Next-Hop |
194 | +MP-BGP peerings over IPv6 are recommended on DN42. |
|
194 | 195 | ``` |
195 | 196 | # For these examples, your peer's link-local address is fe80::4242 |
196 | 197 | |
... | ... | @@ -198,11 +199,16 @@ set protocols bgp neighbor fe80::4242 interface v6only remote-as '4242424242' |
198 | 199 | set protocols bgp neighbor fe80::4242 remote-as '4242424242' |
199 | 200 | set protocols bgp neighbor fe80::4242 interface source-interface 'wg4242424242' |
200 | 201 | set protocols bgp neighbor fe80::4242 update-source 'wg4242424242' |
202 | +set protocols bgp neighbor fe80::4242 description 'FriendlyNet' |
|
203 | + |
|
204 | +# Set the RFC 9234 role to "peer". |
|
205 | +set protocols bgp neighbor fe80::4242 local-role peer |
|
201 | 206 | |
202 | 207 | set protocols bgp neighbor fe80::4242 capability extended-nexthop |
203 | 208 | |
204 | 209 | set protocols bgp neighbor fe80::4242 address-family ipv4-unicast |
205 | 210 | set protocols bgp neighbor fe80::4242 address-family ipv6-unicast |
211 | + |
|
206 | 212 | ``` |
207 | 213 | #### Option 2: BGP (no Multi Protocol) - no Extended Next-Hop |
208 | 214 | ``` |
... | ... | @@ -211,6 +217,7 @@ set protocols bgp neighbor fe80::4242 interface remote-as '4242424242' |
211 | 217 | set protocols bgp neighbor fe80::4242 interface source-interface 'wg4242424242' |
212 | 218 | set protocols bgp neighbor fe80::4242 remote-as '4242424242' |
213 | 219 | set protocols bgp neighbor fe80::4242 address-family ipv6-unicast |
220 | +set protocols bgp neighbor fe80::4242 description 'FriendlyNet' |
|
214 | 221 | |
215 | 222 | # For the ipv4 part we need to add first a static ipv4 route to our peer tunneled ipv4 address |
216 | 223 | set protocols static route 172.20.x.y interface wg1234 |
... | ... | @@ -218,14 +225,58 @@ set protocols static route 172.20.x.y interface wg1234 |
218 | 225 | # 172.20.x.y is your peer tunneled IPv4 |
219 | 226 | set protocols bgp neighbor 172.20.x.y remote-as '<your peer ASN>' |
220 | 227 | set protocols bgp neighbor 172.20.x.y address-family ipv4-unicast |
228 | +set protocols bgp neighbor 172.20.x.y description 'FriendlyNet' |
|
221 | 229 | |
222 | 230 | # This setting may need to be adjusted depending on circumstances |
223 | 231 | set protocols bgp neighbor 172.20.x.y ebgp-multihop 20 |
224 | 232 | ``` |
225 | 233 | |
226 | -You can now check your BGP summary |
|
227 | 234 | |
228 | -`show ip bgp summary` |
|
235 | +You can now check your BGP summary: |
|
236 | + |
|
237 | +```shellsession |
|
238 | +vyos@vyos$ show ip bgp summary |
|
239 | + |
|
240 | +IPv4 Unicast Summary (VRF default): |
|
241 | +BGP router identifier 172.20.20.1, local AS number 4242421234 vrf-id 0 |
|
242 | +BGP table version 2782 |
|
243 | +RIB entries 1378, using 258 KiB of memory |
|
244 | +Peers 1, using 1 MiB of memory |
|
245 | +Peer groups 1, using 64 bytes of memory |
|
246 | + |
|
247 | +Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc |
|
248 | +fe80::4242 4 4242424242 1031 6 0 0 0 00:04:20 710 1 FriendlyNet |
|
249 | + |
|
250 | +IPv6 Unicast Summary (VRF default): |
|
251 | +BGP router identifier 172.20.20.1, local AS number 4242421234 vrf-id 0 |
|
252 | +BGP table version 2782 |
|
253 | +RIB entries 1378, using 258 KiB of memory |
|
254 | +Peers 1, using 1 MiB of memory |
|
255 | +Peer groups 1, using 64 bytes of memory |
|
256 | + |
|
257 | +Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc |
|
258 | +fe80::4242 4 4242424242 1031 6 0 0 0 00:04:20 710 1 FriendlyNet |
|
259 | +``` |
|
260 | + |
|
261 | +Setting up peer-groups might help standardize multiple peerings: |
|
262 | + |
|
263 | +``` |
|
264 | +# One peer group for all IPv6 MP-BGP link-local extended-nexthop peers |
|
265 | +set protocols bgp peer-group dn42 address-family ipv4-unicast |
|
266 | +set protocols bgp peer-group dn42 address-family ipv6-unicast |
|
267 | +set protocols bgp peer-group dn42 capability extended-nexthop |
|
268 | +set protocols bgp peer-group dn42 local-role peer |
|
269 | + |
|
270 | +set protocols bgp neighbor fe80::4242 peer-group dn42 |
|
271 | + |
|
272 | +# If you have any non-multiprotocol peerings you'll need to set up peer-groups |
|
273 | +# for the individual address families. This is left up to the reader. |
|
274 | + |
|
275 | +# Delete the settings that are now redundant |
|
276 | +delete protocols bgp neighbor fe80::4242 address-family |
|
277 | +delete protocols bgp neighbor fe80::4242 capability |
|
278 | +``` |
|
279 | + |
|
229 | 280 | |
230 | 281 | ## RPKI/ROA Checking |
231 | 282 | ### Setup RPKI Caching Server |
... | ... | @@ -330,10 +381,13 @@ set protocols bgp neighbor x.x.x.x address-family ipv6-unicast route-map import |
330 | 381 | ``` |
331 | 382 | |
332 | 383 | ## Credits |
333 | -This How-To has to be considered a work-in-progress by **Matwolf**. |
|
384 | +This How-To has to be considered a work-in-progress by **Matwolf** with parts co-authored by **bri** |
|
334 | 385 | |
335 | 386 | It's based on the original VyOS How-To made by **Owens Research**: [How-To/VyOS](/howto/vyos). |
336 | 387 | |
337 | 388 | The commands in this page have been adapted to be compatible with the new version of VyOS 1.4.x (sagitta) and to include configurations for IPv6 (MP-BGP over link-local and extended next-hop). |
338 | 389 | |
339 | -If you have any questions or suggestions please reach me out. |
|
390 | +If you have any questions or suggestions please reach out. |
|
391 | + |
|
392 | +## See also |
|
393 | +[WireGuard](https://docs.vyos.io/en/latest/configuration/interfaces/wireguard.html) and [BGP](https://docs.vyos.io/en/latest/configuration/protocols/bgp.html) in the official VyOS documentation. |
|
... | ... | \ No newline at end of file |