Andrisoft wanguard 6.2, Руководство пользователя

Страница: 116 / 131

Wanguard 6.2 User Guide Appendix 4 – Network Integration Guideline for Wanguard Filter
router bgp 65000
bgp router-id 192.168.1.100
neighbor 192.168.1.1 remote-as 1000
neighbor 192.168.1.1 description divert-from router
neighbor 192.168.1.1 soft-reconfiguration inbound
neighbor 192.168.1.1 route-map Wanguard-Filter-in in
neighbor 192.168.1.1 route-map Wanguard-Filter-out out
!
route-map Wanguard-Filter-in deny 10
!
route-map Wanguard-Filter-out permit 10
set community no-advertise
!
line vty
... skipped ...
Wanguard connects to bgpd using the BGP Connector component documented on page 51.
ExaBGP Configuration
Use ExaBGP instead of Quagga BGPd if you need FlowSpec. ExaBGP is still under heavy development at the
time of writing and some essential features are only available on the latest version (4.0 branch).
On Debian / Ubuntu systems, install ExaBGP 4.x from git; afterwards install socat by executing:
[root@localhost ~]# apt-get install socat
On RedHat / CentOS systems, install ExaBGP 4.x from git; afterwards install socat by executing:
[root@localhost ~]# yum install socat
Create an example configuration in /etc/exabgp_example.conf
process announce-routes {
run /usr/bin/socat stdout pipe:/var/run/exabgp.cmd;
encoder json;
}
neighbor 192.168.50.1 {
# ID for this ExaBGP router
router-id 192.168.50.2;
local-address 192.168.50.2;
# local AS number
local-as 65001;
# remote AS number
peer-as 12345;
group-updates false;
family {
ipv4 flow;
}
api {
processes [ anounce-routes ];
- 116 -