brnet/bird_config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

DN42临时模板配置，需要审计

Browse Source
This commit is contained in:
gaoyuheng
2025-12-23 16:57:55 +08:00
parent ddf74a9568
commit a7e2ccec61
1 changed files with 21 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
bird/template/dn42.conf
View File

@@ -4,19 +4,34 @@ template bgp dn42_bgp_up {
ipv4 {
table dn42v4;
import filter {
if is_dn42_prefix() && !dn42_is_self_net() then accept;
reject;
if !is_dn42_prefix() then reject;
if dn42_is_self_net() then reject;
bgp_large_community.add((DN42_ASN,200,0));# 传输到Ebgp
accept;
};
export filter {
if !is_dn42_prefix() then reject;
if source !~ [RTS_STATIC, RTS_BGP] then reject;
if bgp_large_community !~ [(DN42_ASN, 200,0)] then reject;
accept;
};
export filter { if is_dn42_prefix() && source ~ [RTS_STATIC, RTS_BGP] then accept; else reject; };
import limit 9000 action block;
};
ipv6 {
table dn42v6;
import filter {
if is_dn42_prefix() && !dn42_is_self_net_v6() then accept;
reject;
if !is_dn42_prefix() then reject;
if dn42_is_self_net_v6() then reject;
bgp_large_community.add((DN42_ASN,200,0));# 传输到Ebgp
accept;
};
export filter {
if !is_dn42_prefix() then reject;
if source !~ [RTS_STATIC, RTS_BGP] then reject;
if bgp_large_community !~ [(DN42_ASN, 200,0)] then reject;
accept;
};
export filter { if is_dn42_prefix() && source ~ [RTS_STATIC, RTS_BGP] then accept; else reject; };
import limit 9000 action block;
};
}