-
-
Save 2bithacker/6561aa4484507c8f2d9d to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
log syslog { debug, trace, info, remote, warning, error, auth, fatal, bug }; | |
router id 192.168.70.212; | |
define asn_ext = [removed]; | |
define asn_int = 65100; | |
define tag_utrs = 100; | |
define tag_bogon = 200; | |
define tag_blackhole = 9999; | |
filter bogon_export { | |
reject; | |
}; | |
filter bogon_import { | |
bgp_community.add((asn_int,tag_bogon)); | |
accept; | |
}; | |
filter edge_export { | |
if ! (source = RTS_BGP) then reject; | |
if (asn_int,tag_utrs) ~ bgp_community then accept; | |
if (asn_int,tag_bogon) ~ bgp_community then accept; | |
reject; | |
} | |
filter edge_import { | |
if net.len < 32 then reject; | |
if [(*,tag_blackhole)] ~ bgp_community then accept; | |
reject; | |
} | |
protocol direct { | |
} | |
protocol kernel { | |
learn; | |
persist; # Don't remove routes on bird shutdown | |
scan time 20; # Scan kernel routing table every 20 seconds | |
import all; # Default is import all | |
export none; # Default is export none | |
} | |
protocol device { | |
scan time 10; # Scan interfaces every 10 seconds | |
} | |
protocol static { | |
} | |
template bgp template_bogon { | |
local as asn_ext; | |
multihop; | |
hold time 180; | |
password "[removed]"; | |
import filter bogon_import; | |
export filter bogon_export; | |
debug all; | |
graceful restart on; | |
} | |
protocol bgp bogon_1 from template_bogon { | |
description "Team Cymru Bogon Service #1"; | |
neighbor [removed] as 65332; | |
} | |
protocol bgp bogon_2 from template_bogon { | |
description "Team Cymru Bogon Service #2"; | |
neighbor [removed] as 65332; | |
} | |
template bgp template_edge { | |
local as asn_int; | |
multihop; | |
debug all; | |
hold time 180; | |
graceful restart on; | |
import none; | |
export filter edge_export; | |
} | |
protocol bgp edge1 from template_edge { | |
neighbor [removed] as 65406; | |
password "[removed]"; | |
} | |
protocol bgp edge2 from template_edge { | |
neighbor [removed] as 65406; | |
password "[removed]"; | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment