Page MenuHomeVyOS Platform
Files F118309553

vrf-bgp-pppoe-underlay
No OneTemporary
Actions

Size
11 KB
Referenced Files
None
Subscribers
None

vrf-bgp-pppoe-underlay
View Options

interfaces {
bridge br50 {
address 192.168.0.1/24
member {
interface eth0.50 {
}
interface eth2 {
}
interface eth3 {
}
}
}
dummy dum0 {
address 100.64.51.252/32
address 2001:db8:200:ffff::1/128
vrf vyos-test-01
}
ethernet eth0 {
offload {
gro
gso
rps
sg
tso
}
ring-buffer {
rx 256
tx 256
}
vif 5 {
address 2001:db8:200:f0::114/64
address 100.64.50.121/28
vrf vyos-test-01
}
vif 10 {
address 2001:db8:200:10::ffff/64
address 2001:db8:200::ffff/64
address 100.64.50.62/26
vrf vyos-test-01
}
vif 15 {
address 100.64.50.78/28
address 2001:db8:200:15::ffff/64
vrf vyos-test-01
}
vif 50 {
description "Member of bridge br50"
}
vif 110 {
address 100.64.51.190/27
address 100.64.51.158/28
address 2001:db8:200:101::ffff/64
vrf vyos-test-01
}
vif 410 {
address 100.64.51.206/28
address 2001:db8:200:104::ffff/64
vrf vyos-test-01
}
vif 500 {
address 100.64.51.238/28
address 2001:db8:200:50::ffff/64
vrf vyos-test-01
}
vif 520 {
address 100.64.50.190/28
address 2001:db8:200:520::ffff/64
vrf vyos-test-01
}
vif 666 {
address 2001:db8:200:ff::101:1/112
address 100.64.51.223/31
vrf vyos-test-01
}
vif 800 {
address 2001:db8:200:ff::104:1/112
address 100.64.51.212/31
vrf vyos-test-01
}
vif 810 {
address 100.64.51.30/27
address 2001:db8:200:102::ffff/64
vrf vyos-test-01
}
}
ethernet eth1 {
offload {
gro
gso
rps
sg
tso
}
ring-buffer {
rx 256
tx 256
}
}
ethernet eth2 {
offload {
gro
gso
sg
tso
}
}
ethernet eth3 {
offload {
gro
gso
sg
tso
}
}
loopback lo {
}
pppoe pppoe7 {
authentication {
password vyos
username vyos
}
dhcpv6-options {
pd 0 {
interface br50 {
address 1
}
length 56
}
}
ip {
adjust-mss 1452
}
ipv6 {
address {
autoconf
}
adjust-mss 1432
}
mtu 1492
no-peer-dns
source-interface eth1
}
virtual-ethernet veth0 {
address 100.64.51.220/31
address 2001:db8:200:ff::105:1/112
description "Core: connect vyos-test-01 and default VRF"
peer-name veth1
}
virtual-ethernet veth1 {
address 100.64.51.221/31
address 2001:db8:200:ff::105:2/112
description "Core: connect vyos-test-01 and default VRF"
peer-name veth0
vrf vyos-test-01
}
wireguard wg500 {
address 100.64.51.209/31
mtu 1500
peer A {
address 192.0.2.1
allowed-ips 0.0.0.0/0
port 5500
public-key KGSXF4QckzGe7f7CT+r6VZ5brOD/pVYk8yvrxOQ+X0Y=
}
port 5500
private-key iLJh6Me6AdPJtNv3dgGhUbtyFxExxmNU4v0Fs6YE2Xc=
vrf vyos-test-01
}
wireguard wg501 {
address 2001:db8:200:ff::102:2/112
mtu 1500
peer A {
address 2001:db8:300::1
allowed-ips ::/0
port 5501
public-key OF+1OJ+VfQ0Yw1mgVtQ2ion4CnAdy8Bvx7yEiO4+Pn8=
}
port 5501
private-key 0MP5X0PW58O4q2LDpuIXgZ0ySyAoWH8/kdpvQccCbUU=
vrf vyos-test-01
}
wireguard wg666 {
address 172.29.0.0/31
mtu 1500
peer B {
allowed-ips 0.0.0.0/0
public-key 2HT+RfwcqJMYNYzdmtmpem8Ht0dL37o31APHVwmh024=
}
port 50666
private-key zvPnp2MLAoX7SotuHLFLDyy4sdlD7ttbD1xNEqA3mkU=
}
}
nat {
source {
rule 100 {
outbound-interface pppoe7
source {
address 192.168.0.0/24
}
translation {
address masquerade
}
}
}
}
policy {
prefix-list AS100-origin-v4 {
rule 10 {
action permit
prefix 100.64.0.0/12
}
rule 100 {
action permit
prefix 0.0.0.0/0
}
}
prefix-list AS200-origin-v4 {
rule 10 {
action permit
prefix 10.0.0.0/8
}
rule 20 {
action permit
prefix 172.16.0.0/12
}
}
prefix-list6 AS100-origin-v6 {
rule 10 {
action permit
prefix 2001:db8:200::/40
}
}
prefix-list6 AS200-origin-v6 {
rule 10 {
action permit
prefix 2001:db8:100::/40
}
}
}
protocols {
static {
route 192.0.2.255/32 {
interface pppoe7 {
}
}
route 100.64.50.0/23 {
next-hop 100.64.51.221 {
}
}
route6 2001:db8:ffff:ffff:ffff:ffff:ffff:ffff/128 {
interface pppoe7 {
}
}
}
}
qos {
interface pppoe7 {
egress isp-out
}
policy {
shaper isp-out {
bandwidth 38mbit
default {
bandwidth 100%
burst 15k
queue-limit 1000
queue-type fq-codel
}
}
}
}
service {
router-advert {
interface br50 {
prefix ::/64 {
preferred-lifetime 2700
valid-lifetime 5400
}
}
interface eth0.500 {
default-preference high
name-server 2001:db8:200::1
name-server 2001:db8:200::2
prefix 2001:db8:200:50::/64 {
valid-lifetime infinity
}
}
interface eth0.520 {
default-preference high
name-server 2001:db8:200::1
name-server 2001:db8:200::2
prefix 2001:db8:200:520::/64 {
valid-lifetime infinity
}
}
}
ssh {
disable-host-validation
dynamic-protection {
allow-from 100.64.0.0/10
allow-from 2001:db8:200::/40
}
}
}
system {
config-management {
commit-revisions 100
}
conntrack {
modules {
ftp
h323
nfs
pptp
sip
sqlnet
tftp
}
}
console {
device ttyS0 {
speed 115200
}
}
domain-name vyos.net
host-name vyos
login {
user vyos {
authentication {
encrypted-password $6$O5gJRlDYQpj$MtrCV9lxMnZPMbcxlU7.FI793MImNHznxGoMFgm3Q6QP3vfKJyOSRCt3Ka/GzFQyW1yZS4NS616NLHaIPPFHc0
plaintext-password ""
}
}
}
name-server 192.168.0.1
syslog {
global {
facility all {
level info
}
facility protocols {
level debug
}
}
}
time-zone Europe/Berlin
}
vrf {
bind-to-all
name vyos-test-01 {
protocols {
bgp {
address-family {
ipv4-unicast {
network 100.64.50.0/23 {
}
}
ipv6-unicast {
network 2001:db8:200:ffff::1/128 {
}
}
}
neighbor 100.64.51.208 {
peer-group AS100v4
}
neighbor 100.64.51.222 {
address-family {
ipv4-unicast {
default-originate {
}
maximum-prefix 10
prefix-list {
export AS100-origin-v4
import AS200-origin-v4
}
soft-reconfiguration {
inbound
}
}
}
capability {
dynamic
}
remote-as 200
}
neighbor 100.64.51.251 {
peer-group AS100v4
shutdown
}
neighbor 100.64.51.254 {
peer-group AS100v4
shutdown
}
neighbor 2001:db8:200:ffff::2 {
peer-group AS100v6
shutdown
}
neighbor 2001:db8:200:ffff::a {
peer-group AS100v6
}
neighbor 2001:db8:200:ff::101:2 {
address-family {
ipv6-unicast {
maximum-prefix 10
prefix-list {
export AS100-origin-v6
import AS200-origin-v6
}
soft-reconfiguration {
inbound
}
}
}
capability {
dynamic
}
remote-as 200
}
peer-group AS100v4 {
address-family {
ipv4-unicast {
nexthop-self {
}
}
}
capability {
dynamic
}
remote-as internal
update-source dum0
}
peer-group AS100v6 {
address-family {
ipv6-unicast {
nexthop-self {
}
}
}
capability {
dynamic
}
remote-as internal
update-source dum0
}
system-as 100
}
static {
route 192.168.0.0/24 {
next-hop 100.64.51.220 {
}
}
route 100.64.50.0/23 {
blackhole {
}
}
route 100.64.51.32/27 {
next-hop 100.64.51.5 {
}
}
route6 2001:db8:2fe:ffff::/64 {
next-hop 2001:db8:200:102::5 {
}
}
}
}
table 1000
}
}
// Warning: Do not remove the following line.
// vyos-config-version: "bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2"
// Release version: 1.4-rolling-202303160317

File Metadata

Mime Type
text/plain
Expires
Sat, Oct 17, 12:49 AM (1 d, 6 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
4352724
Default Alt Text
vrf-bgp-pppoe-underlay (11 KB)

Event Timeline