rc/network
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

firewall: update backup route maps

Browse source 
To match the prefixes that are sent by firewalls.
This commit is contained in:
Timotej Lazar 2024-09-21 10:13:26 +02:00
parent 6c18e2ff94
commit ef1b00adce
1 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
roles/exit/templates/frr.conf.j2
View file

@ -448,11 +448,15 @@ route-map me->peer.4 permit 110
route-map me->peer.4 permit 111 route-map me->peer.4 permit 111
match ipv6 address prefix-list default match ipv6 address prefix-list default
route-map me->peer.4 permit 120 route-map me->peer.4 permit 120
match ip address prefix-list nat match ip address prefix-list office
route-map me->peer.4 permit 121 route-map me->peer.4 permit 121
match ipv6 address prefix-list vpn
route-map me->peer.4 permit 131
match ipv6 address prefix-list office match ipv6 address prefix-list office
route-map me->peer.4 permit 130
match ip address prefix-list nat
route-map me->peer.4 permit 140
match ip address prefix-list vpn
route-map me->peer.4 permit 141
match ipv6 address prefix-list vpn
# Received backup routes (same as above). # Received backup routes (same as above).
route-map peer.4->me permit 110 route-map peer.4->me permit 110
@ -460,8 +464,12 @@ route-map peer.4->me permit 110
route-map peer.4->me permit 111 route-map peer.4->me permit 111
match ipv6 address prefix-list default match ipv6 address prefix-list default
route-map peer.4->me permit 120 route-map peer.4->me permit 120
match ip address prefix-list nat match ip address prefix-list office
route-map peer.4->me permit 121 route-map peer.4->me permit 121
match ipv6 address prefix-list vpn
route-map peer.4->me permit 131
match ipv6 address prefix-list office match ipv6 address prefix-list office
route-map peer.4->me permit 130
match ip address prefix-list nat
route-map peer.4->me permit 140
match ip address prefix-list vpn
route-map peer.4->me permit 141
match ipv6 address prefix-list vpn