Timotej Lazar
036f7c8b74
Like allowed_prefixes, but for single IP addresses. Currently used just for DHCP server to allow (only) packets from relays. |
||
---|---|---|
filter_plugins | ||
roles | ||
.gitignore | ||
ansible.cfg | ||
inventory.yml | ||
LICENSE | ||
README.md | ||
setup.yml | ||
UNLICENSE |
These Ansible roles set up servers running various Linux distributions to participate in BGP routing. Device and IP address data are pulled from NetBox. A separate VRF mgmt
is configured for a L2 management interface.
Setup
Each server should have the following information recorded in NetBox:
- network interfaces
mgmt*
: used for management (Ansible) access; must define MAC and IP address - network interfaces
lan*
: used for BGP routing; must define MAC address - network interface
lo
: must define the IP address to announce over BGP, also serves as router ID
For the management IP address, another address in the same prefix should be defined with the tag gateway
.
Run
Create a read-only token in NetBox. Define required variables:
export NETBOX_API=<url>
export NETBOX_TOKEN=<token>
Run one-off tasks with (add --key-file
or other options as necessary):
ansible -m ping 'server-*'
Run a playbook with:
ansible-playbook setup.yml -l 'server-*'