#desenvolvido por thalesmoises.com # #log de informacoes inseridas #numero do seu as = 61778 #nome do peer = LINK01 #ip do peer = 10.20.30.1 #asn do peer = 9999 #seu ipv4 da sessao = 10.20.30.2 #ipv6 do peer=2804:1934::1 #seu ipv6 da sessao=2804:1934::2 #nome do ip-prefix v4 inserido=MEU_AS-V4 #nome do ip-prefix v6 inserido=MEU_AS-V6 ##################################### #versao da config para vrp8 # !CRIA ROUTE POLICY V4 #deny generico de segurança route-policy TRANSITO-LINK01-V4-IN deny node 10 #deny de descarte generico (bogons) route-policy TRANSITO-LINK01-V4-IN deny node 200 if-match ip-prefix DESCARTE-GENERICO-V4 # # #deny generico de segurança route-policy TRANSITO-LINK01-V4-OUT deny node 10 #permit do ip-prefix selecionado route-policy TRANSITO-LINK01-V4-OUT permit node 200 if-match ip-prefix MEU_AS-V4 #deny explicito no final route-policy TRANSITO-LINK01-V4-OUT deny node 65000 # # !CONFIG PEER V4 bgp 61778 peer 10.20.30.1 as-number 9999 peer 10.20.30.1 description TRANSITO-LINK01-V4 peer 10.20.30.1 timer keepalive 3 hold 30 Y peer 10.20.30.1 connect-interface 10.20.30.2 peer 10.20.30.1 connect-only ipv4-family unicast peer 10.20.30.1 enable peer 10.20.30.1 public-as-only peer 10.20.30.1 route-policy TRANSITO-LINK01-V4-IN import peer 10.20.30.1 route-policy TRANSITO-LINK01-V4-OUT export peer 10.20.30.1 advertise-community peer 10.20.30.1 advertise-ext-community #################### ################# !CRIA ROUTE POLICY V6 #deny geral de segurança route-policy TRANSITO-LINK01-V6-IN deny node 10 #deny bogons v6 route-policy TRANSITO-LINK01-V6-IN deny node 200 if-match ipv6 address prefix-list DESCARTE-GENERICO-V6 # #deny geral de segurança route-policy TRANSITO-LINK01-V6-OUT deny node 10 # route-policy TRANSITO-LINK01-V6-OUT permit node 200 if-match ipv6 address prefix-list MEU_AS-V6 #deny explicito ipv6 route-policy TRANSITO-LINK01-V6-OUT deny node 65000 # # !CONFIG PEER V6 bgp 61778 peer 2804:1934::1 as-number 9999 peer 2804:1934::1 description TRANSITO-LINK01-V6 peer 2804:1934::1 timer keepalive 3 hold 30 Y peer 2804:1934::1 connect-interface 2804:1934::2 peer 2804:1934::1 connect-only # ipv6-family unicast peer 2804:1934::1 enable Y peer 2804:1934::1 public-as-only peer 2804:1934::1 route-policy TRANSITO-LINK01-V6-IN import peer 2804:1934::1 route-policy TRANSITO-LINK01-V6-OUT export peer 2804:1934::1 advertise-community peer 2804:1934::1 advertise-ext-community ##################################### #fim da config