This commit is contained in:
2026-06-08 17:28:53 +08:00
parent 2991b41762
commit 42fd9fcae4
4 changed files with 66 additions and 60 deletions

View File

@@ -3,34 +3,14 @@ template bgp unet_bgp_up0 {
local as UNET_ASN;
ipv4 {
table unet4;
import filter {
if !unet_is_valid_network_v4_allnet() then reject;
if is_unet_self_net() then reject;
bgp_large_community.add((UNET_ASN,200,0));
accept;
};
export filter {
if !unet_is_valid_network_v4_allnet() then reject;
if source !~ [RTS_STATIC, RTS_BGP] then reject;
if bgp_large_community !~ [(UNET_ASN, 200,0)] then reject;
accept;
};
import filter {if !function_unet_import() then reject; accept; };
export filter {if !function_unet_export() then reject; accept; };
import limit 9000 action block;
};
ipv6 {
table unet6;
import filter {
if !unet_is_voalid_net_v6() then reject;
if is_unet_self_net() then reject;
bgp_large_community.add((UNET_ASN,200,0));
accept;
};
export filter {
if !unet_is_voalid_net_v6() then reject;
if source !~ [RTS_STATIC, RTS_BGP] then reject;
if bgp_large_community !~ [(UNET_ASN, 200,0)] then reject;
accept;
};
import filter {if !function_unet_import() then reject; accept; };
export filter {if !function_unet_export() then reject; accept; };
import limit 9000 action block;
};
}
@@ -40,18 +20,8 @@ template bgp unet_bgp_up1 {
local as UNET_ASN;
ipv4 {
table unet4;
import filter {
if !unet_is_valid_network_v4() then reject;
if is_unet_self_net() then reject;
bgp_large_community.add((UNET_ASN,200,0));
accept;
};
export filter {
if !unet_is_valid_network_v4() then reject;
if source !~ [RTS_STATIC, RTS_BGP] then reject;
if bgp_large_community !~ [(UNET_ASN, 200,0)] then reject;
accept;
};
import filter {if !function_unet_only_import() then reject; accept; };
export filter {if !function_unet_only_export() then reject; accept; };
import limit 9000 action block;
};
}
@@ -65,34 +35,14 @@ template bgp unet_ibgp {
table unet4;
next hop self;
gateway direct;
import filter {
if bgp_large_community ~ [(UNET_ASN, 1,*)] then reject;
if !unet_is_valid_network_v4_allnet() then reject;
if is_unet_self_net() then reject;
accept;
};
export filter {
if bgp_large_community ~ [(UNET_ASN, 1,*)] then reject;
if !unet_is_valid_network_v4_allnet() then reject;
if is_unet_self_net() then reject;
accept;
};
import filter {if !function_unet_ibgp_import() then reject; accept; };
export filter {if !function_unet_ibgp_export() then reject; accept; };
};
ipv6 {
table unet6;
next hop self;
gateway direct;
import filter {
if bgp_large_community ~ [(UNET_ASN, 1,*)] then reject;
if !unet_is_voalid_net_v6() then reject;
if is_unet_self_net() then reject;
accept;
};
export filter {
if bgp_large_community ~ [(UNET_ASN, 1,*)] then reject;
if !unet_is_voalid_net_v6() then reject;
if is_unet_self_net() then reject;
accept;
};
import filter {if !function_unet_ibgp_import() then reject; accept; };
export filter {if !function_unet_ibgp_export() then reject; accept; };
};
}