rc/network
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: rc:7b5980f871da4d946cda3ed8933c8d9ec47a229c
Branches Tags
rc:master
..
compare: rc:9a56e481412fb20ceb3af86a11e66759c009674e
Branches Tags
rc:master

No commits in common. "7b5980f871da4d946cda3ed8933c8d9ec47a229c" and "9a56e481412fb20ceb3af86a11e66759c009674e" have entirely different histories.
7b5980f871 ... 9a56e48141

2 changed files with 3 additions and 5 deletions
Show stats Expand all files Collapse all files

3
roles/exit/templates/frr.conf.j2
View file

@ -188,6 +188,7 @@ router bgp {{ asn.asn }} vrf inside
{% for vrf in vrfs.values() | selectattr('name', 'in', inside_vrfs) %}
# VRF for L2 network {{ vrf.name }}. Imports gateway from inside VRF.
router bgp {{ asn.asn }} vrf {{ vrf.name }}
bgp bestpath as-path multipath-relax
@ -358,8 +359,6 @@ route-map firewall->outside permit 1
match ip address prefix-list fabric
route-map firewall->outside permit 2
match ipv6 address prefix-list fabric
route-map firewall->outside permit 20
match ip address prefix-list office
route-map firewall->outside permit 21
match ipv6 address prefix-list office
route-map firewall->outside permit 30

5
roles/firewall/templates/frr.conf.j2
View file

@ -136,11 +136,10 @@ route-map outside->default permit 10
route-map outside->default permit 11
match ipv6 address prefix-list default
# Send inside and NAT addresses to outside peers so inbound packets go through the firewall.
# Send IPv6 office addresses and IPv4 NAT addresses to outside peers
# so inbound packets go through the firewall.
route-map default->outside permit 1
match interface lo
route-map default->outside permit 10
match ip address prefix-list office
route-map default->outside permit 11
match ipv6 address prefix-list office
route-map default->outside permit 20