#desenvolvido por thalesmoises.com
#
#log de informacoes inseridas
#numero do seu as = 268673
#nome do peer = bigode
#ip do peer = 192.168.1.2
#asn do peer = 267789
#seu ipv4 da sessao = 192.168.1.1
#ipv6 do peer=
#seu ipv6 da sessao=
#nome do ip-prefix v4 inserido=teste
#nome do ip-prefix v6 inserido=
#####################################
#versao da config para vrp8
#
!CRIA ROUTE POLICY V4
#deny generico de segurança
route-policy TRANSITO-bigode-V4-IN deny node 10
#deny de descarte generico (bogons)
route-policy TRANSITO-bigode-V4-IN deny node 200
 if-match ip-prefix DESCARTE-GENERICO-V4
#
#
#deny generico de segurança
route-policy TRANSITO-bigode-V4-OUT deny node 10
#permit do ip-prefix selecionado
route-policy TRANSITO-bigode-V4-OUT permit node 200
 if-match ip-prefix teste
#deny explicito no final
route-policy TRANSITO-bigode-V4-OUT deny node 65000
#
#
!CONFIG PEER V4
bgp 268673
 peer 192.168.1.2 as-number 267789
 peer 192.168.1.2 description TRANSITO-bigode-V4
 peer 192.168.1.2 timer keepalive 3 hold 30
Y
 peer 192.168.1.2 connect-interface 192.168.1.1
 peer 192.168.1.2 connect-only
ipv4-family unicast
 peer 192.168.1.2 enable
 peer 192.168.1.2 public-as-only
 peer 192.168.1.2 route-policy TRANSITO-bigode-V4-IN  import
 peer 192.168.1.2 route-policy TRANSITO-bigode-V4-OUT  export
 peer 192.168.1.2 advertise-community
 peer 192.168.1.2 advertise-ext-community
####################
#################
!CRIA ROUTE POLICY V6
#deny geral de segurança
route-policy TRANSITO-bigode-V6-IN deny node 10
#deny bogons v6
route-policy TRANSITO-bigode-V6-IN deny node 200
if-match ipv6 address prefix-list DESCARTE-GENERICO-V6
#
#deny geral de segurança
route-policy TRANSITO-bigode-V6-OUT deny node 10
#
route-policy TRANSITO-bigode-V6-OUT permit node 200
if-match ipv6 address prefix-list 
#deny explicito ipv6
route-policy TRANSITO-bigode-V6-OUT deny node 65000
#
#
!CONFIG PEER V6
bgp 268673
 peer  as-number 267789
 peer  description TRANSITO-bigode-V6
 peer  timer keepalive 3 hold 30
Y
 peer  connect-interface 
 peer  connect-only
#
ipv6-family unicast
 peer  enable
Y
 peer  public-as-only
 peer  route-policy TRANSITO-bigode-V6-IN  import
 peer  route-policy TRANSITO-bigode-V6-OUT  export
 peer  advertise-community
 peer  advertise-ext-community
#####################################
#fim da config