#desenvolvido por thalesmoises.com # #log de informacoes inseridas #numero do seu as = 53123 #nome do peer = WANTEL #ip do peer = 10.188.1.0/30 #asn do peer = 2000.216.0.0/30 #seu ipv4 da sessao = 10.188.1.1 #ipv6 do peer=2000.216.0.1 #seu ipv6 da sessao=2000.216.0.2 #nome do ip-prefix v4 inserido=POWER-IPV4 #nome do ip-prefix v6 inserido=POWER-IPV6 ##################################### #versao da config para vrp8 # !CRIA ROUTE POLICY V4 #deny generico de segurança route-policy TRANSITO-WANTEL-V4-IN deny node 10 #deny de descarte generico (bogons) route-policy TRANSITO-WANTEL-V4-IN deny node 200 if-match ip-prefix DESCARTE-GENERICO-V4 # # #deny generico de segurança route-policy TRANSITO-WANTEL-V4-OUT deny node 10 #permit do ip-prefix selecionado route-policy TRANSITO-WANTEL-V4-OUT permit node 200 if-match ip-prefix POWER-IPV4 #deny explicito no final route-policy TRANSITO-WANTEL-V4-OUT deny node 65000 # # !CONFIG PEER V4 bgp 53123 peer 10.188.1.0/30 as-number 2000.216.0.0/30 peer 10.188.1.0/30 description TRANSITO-WANTEL-V4 peer 10.188.1.0/30 timer keepalive 3 hold 30 Y peer 10.188.1.0/30 connect-interface 10.188.1.1 peer 10.188.1.0/30 connect-only ipv4-family unicast peer 10.188.1.0/30 enable peer 10.188.1.0/30 public-as-only peer 10.188.1.0/30 route-policy TRANSITO-WANTEL-V4-IN import peer 10.188.1.0/30 route-policy TRANSITO-WANTEL-V4-OUT export peer 10.188.1.0/30 advertise-community peer 10.188.1.0/30 advertise-ext-community #################### ################# !CRIA ROUTE POLICY V6 #deny geral de segurança route-policy TRANSITO-WANTEL-V6-IN deny node 10 #deny bogons v6 route-policy TRANSITO-WANTEL-V6-IN deny node 200 if-match ipv6 address prefix-list DESCARTE-GENERICO-V6 # #deny geral de segurança route-policy TRANSITO-WANTEL-V6-OUT deny node 10 # route-policy TRANSITO-WANTEL-V6-OUT permit node 200 if-match ipv6 address prefix-list POWER-IPV6 #deny explicito ipv6 route-policy TRANSITO-WANTEL-V6-OUT deny node 65000 # # !CONFIG PEER V6 bgp 53123 peer 2000.216.0.1 as-number 2000.216.0.0/30 peer 2000.216.0.1 description TRANSITO-WANTEL-V6 peer 2000.216.0.1 timer keepalive 3 hold 30 Y peer 2000.216.0.1 connect-interface 2000.216.0.2 peer 2000.216.0.1 connect-only # ipv6-family unicast peer 2000.216.0.1 enable Y peer 2000.216.0.1 public-as-only peer 2000.216.0.1 route-policy TRANSITO-WANTEL-V6-IN import peer 2000.216.0.1 route-policy TRANSITO-WANTEL-V6-OUT export peer 2000.216.0.1 advertise-community peer 2000.216.0.1 advertise-ext-community ##################################### #fim da config