5246c347b4ac896a4efcce8a4bd072b15827e2b8
howto/vyos1.4.x.md
| ... | ... | @@ -191,6 +191,7 @@ set protocols bgp parameters router-id '172.20.20.1' |
| 191 | 191 | |
| 192 | 192 | ### Neighbor Up With Peers |
| 193 | 193 | #### Option 1: MP-BGP (with Multi Protocol) - with Extended Next-Hop |
| 194 | +MP-BGP peerings over IPv6 are recommended on DN42. |
|
| 194 | 195 | ``` |
| 195 | 196 | # For these examples, your peer's link-local address is fe80::4242 |
| 196 | 197 | |
| ... | ... | @@ -198,11 +199,16 @@ set protocols bgp neighbor fe80::4242 interface v6only remote-as '4242424242' |
| 198 | 199 | set protocols bgp neighbor fe80::4242 remote-as '4242424242' |
| 199 | 200 | set protocols bgp neighbor fe80::4242 interface source-interface 'wg4242424242' |
| 200 | 201 | set protocols bgp neighbor fe80::4242 update-source 'wg4242424242' |
| 202 | +set protocols bgp neighbor fe80::4242 description 'FriendlyNet' |
|
| 203 | + |
|
| 204 | +# Set the RFC 9234 role to "peer". |
|
| 205 | +set protocols bgp neighbor fe80::4242 local-role peer |
|
| 201 | 206 | |
| 202 | 207 | set protocols bgp neighbor fe80::4242 capability extended-nexthop |
| 203 | 208 | |
| 204 | 209 | set protocols bgp neighbor fe80::4242 address-family ipv4-unicast |
| 205 | 210 | set protocols bgp neighbor fe80::4242 address-family ipv6-unicast |
| 211 | + |
|
| 206 | 212 | ``` |
| 207 | 213 | #### Option 2: BGP (no Multi Protocol) - no Extended Next-Hop |
| 208 | 214 | ``` |
| ... | ... | @@ -211,6 +217,7 @@ set protocols bgp neighbor fe80::4242 interface remote-as '4242424242' |
| 211 | 217 | set protocols bgp neighbor fe80::4242 interface source-interface 'wg4242424242' |
| 212 | 218 | set protocols bgp neighbor fe80::4242 remote-as '4242424242' |
| 213 | 219 | set protocols bgp neighbor fe80::4242 address-family ipv6-unicast |
| 220 | +set protocols bgp neighbor fe80::4242 description 'FriendlyNet' |
|
| 214 | 221 | |
| 215 | 222 | # For the ipv4 part we need to add first a static ipv4 route to our peer tunneled ipv4 address |
| 216 | 223 | set protocols static route 172.20.x.y interface wg1234 |
| ... | ... | @@ -218,14 +225,58 @@ set protocols static route 172.20.x.y interface wg1234 |
| 218 | 225 | # 172.20.x.y is your peer tunneled IPv4 |
| 219 | 226 | set protocols bgp neighbor 172.20.x.y remote-as '<your peer ASN>' |
| 220 | 227 | set protocols bgp neighbor 172.20.x.y address-family ipv4-unicast |
| 228 | +set protocols bgp neighbor 172.20.x.y description 'FriendlyNet' |
|
| 221 | 229 | |
| 222 | 230 | # This setting may need to be adjusted depending on circumstances |
| 223 | 231 | set protocols bgp neighbor 172.20.x.y ebgp-multihop 20 |
| 224 | 232 | ``` |
| 225 | 233 | |
| 226 | -You can now check your BGP summary |
|
| 227 | 234 | |
| 228 | -`show ip bgp summary` |
|
| 235 | +You can now check your BGP summary: |
|
| 236 | + |
|
| 237 | +```shellsession |
|
| 238 | +vyos@vyos$ show ip bgp summary |
|
| 239 | + |
|
| 240 | +IPv4 Unicast Summary (VRF default): |
|
| 241 | +BGP router identifier 172.20.20.1, local AS number 4242421234 vrf-id 0 |
|
| 242 | +BGP table version 2782 |
|
| 243 | +RIB entries 1378, using 258 KiB of memory |
|
| 244 | +Peers 1, using 1 MiB of memory |
|
| 245 | +Peer groups 1, using 64 bytes of memory |
|
| 246 | + |
|
| 247 | +Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc |
|
| 248 | +fe80::4242 4 4242424242 1031 6 0 0 0 00:04:20 710 1 FriendlyNet |
|
| 249 | + |
|
| 250 | +IPv6 Unicast Summary (VRF default): |
|
| 251 | +BGP router identifier 172.20.20.1, local AS number 4242421234 vrf-id 0 |
|
| 252 | +BGP table version 2782 |
|
| 253 | +RIB entries 1378, using 258 KiB of memory |
|
| 254 | +Peers 1, using 1 MiB of memory |
|
| 255 | +Peer groups 1, using 64 bytes of memory |
|
| 256 | + |
|
| 257 | +Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc |
|
| 258 | +fe80::4242 4 4242424242 1031 6 0 0 0 00:04:20 710 1 FriendlyNet |
|
| 259 | +``` |
|
| 260 | + |
|
| 261 | +Setting up peer-groups might help standardize multiple peerings: |
|
| 262 | + |
|
| 263 | +``` |
|
| 264 | +# One peer group for all IPv6 MP-BGP link-local extended-nexthop peers |
|
| 265 | +set protocols bgp peer-group dn42 address-family ipv4-unicast |
|
| 266 | +set protocols bgp peer-group dn42 address-family ipv6-unicast |
|
| 267 | +set protocols bgp peer-group dn42 capability extended-nexthop |
|
| 268 | +set protocols bgp peer-group dn42 local-role peer |
|
| 269 | + |
|
| 270 | +set protocols bgp neighbor fe80::4242 peer-group dn42 |
|
| 271 | + |
|
| 272 | +# If you have any non-multiprotocol peerings you'll need to set up peer-groups |
|
| 273 | +# for the individual address families. This is left up to the reader. |
|
| 274 | + |
|
| 275 | +# Delete the settings that are now redundant |
|
| 276 | +delete protocols bgp neighbor fe80::4242 address-family |
|
| 277 | +delete protocols bgp neighbor fe80::4242 capability |
|
| 278 | +``` |
|
| 279 | + |
|
| 229 | 280 | |
| 230 | 281 | ## RPKI/ROA Checking |
| 231 | 282 | ### Setup RPKI Caching Server |
| ... | ... | @@ -330,10 +381,13 @@ set protocols bgp neighbor x.x.x.x address-family ipv6-unicast route-map import |
| 330 | 381 | ``` |
| 331 | 382 | |
| 332 | 383 | ## Credits |
| 333 | -This How-To has to be considered a work-in-progress by **Matwolf**. |
|
| 384 | +This How-To has to be considered a work-in-progress by **Matwolf** with parts co-authored by **bri** |
|
| 334 | 385 | |
| 335 | 386 | It's based on the original VyOS How-To made by **Owens Research**: [How-To/VyOS](/howto/vyos). |
| 336 | 387 | |
| 337 | 388 | The commands in this page have been adapted to be compatible with the new version of VyOS 1.4.x (sagitta) and to include configurations for IPv6 (MP-BGP over link-local and extended next-hop). |
| 338 | 389 | |
| 339 | -If you have any questions or suggestions please reach me out. |
|
| 390 | +If you have any questions or suggestions please reach out. |
|
| 391 | + |
|
| 392 | +## See also |
|
| 393 | +[WireGuard](https://docs.vyos.io/en/latest/configuration/interfaces/wireguard.html) and [BGP](https://docs.vyos.io/en/latest/configuration/protocols/bgp.html) in the official VyOS documentation. |
|
| ... | ... | \ No newline at end of file |