-
Notifications
You must be signed in to change notification settings - Fork 949
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Luca Prete
committed
Mar 21, 2023
1 parent
3b20d61
commit 991492b
Showing
21 changed files
with
655 additions
and
264 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
74 changes: 74 additions & 0 deletions
74
fast/stages/2-networking-c-nva/data/bgp-configs/primary-b.tpl
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,74 @@ | ||
| # NVA primary-b BGP configuration | ||
|
|
||
| log syslog informational | ||
| no ipv6 forwarding | ||
| service integrated-vtysh-config | ||
|
|
||
| interface lo | ||
| ip address ${ip_untrusted}/32 | ||
|
|
||
| route-map ALLOW-ALL permit 100 | ||
| route-map PRIMARY permit 10 | ||
| set metric 100 | ||
| route-map SECONDARY permit 20 | ||
| set metric 10100 | ||
| route-map NVA-TO-NVA permit 30 | ||
| set metric 50 | ||
|
|
||
| # Peering with untrusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view untrusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_untrusted_0} remote-as ${asn_untrusted} | ||
| neighbor ${ip_neighbor_untrusted_1} remote-as ${asn_untrusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_untrusted_0} activate | ||
| neighbor ${ip_neighbor_untrusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_untrusted_1} activate | ||
| neighbor ${ip_neighbor_untrusted_1} soft-reconfiguration inbound | ||
| network ${gcp_landing_trusted_primary} route-map PRIMARY | ||
| network ${gcp_landing_trusted_secondary} route-map SECONDARY | ||
| network ${gcp_dev_primary} route-map PRIMARY | ||
| network ${gcp_dev_secondary} route-map SECONDARY | ||
| network ${gcp_prod_primary} route-map PRIMARY | ||
| network ${gcp_prod_secondary} route-map SECONDARY | ||
| exit-address-family | ||
|
|
||
| # Peering with trusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view trusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_trusted_0} remote-as ${asn_trusted} | ||
| neighbor ${ip_neighbor_trusted_1} remote-as ${asn_trusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_trusted_0} activate | ||
| neighbor ${ip_neighbor_trusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_trusted_1} activate | ||
| neighbor ${ip_neighbor_trusted_1} soft-reconfiguration inbound | ||
| network 0.0.0.0/0 route-map PRIMARY | ||
| exit-address-family | ||
|
|
||
| # Peering with cross-region NVAs | ||
| # (for cross-spoke communication) | ||
| router bgp ${asn_nva} view cross-nva | ||
| bgp router-id ${ip_untrusted}/32 | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_cross_region_nva_0} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_0} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_0} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_0} next-hop-self | ||
| neighbor ${ip_neighbor_cross_region_nva_1} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_1} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_1} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_1} next-hop-self | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_cross_region_nva_0} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_cross_region_nva_1} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_1} soft-reconfiguration inbound | ||
| network ${gcp_dev_primary} route-map NVA-TO-NVA | ||
| network ${gcp_prod_primary} route-map NVA-TO-NVA | ||
| exit-address-family | ||
|
|
||
| line vty |
74 changes: 74 additions & 0 deletions
74
fast/stages/2-networking-c-nva/data/bgp-configs/primary-c.tpl
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,74 @@ | ||
| # NVA primary-c BGP configuration | ||
|
|
||
| log syslog informational | ||
| no ipv6 forwarding | ||
| service integrated-vtysh-config | ||
|
|
||
| interface lo | ||
| ip address ${ip_untrusted}/32 | ||
|
|
||
| route-map ALLOW-ALL permit 100 | ||
| route-map PRIMARY permit 10 | ||
| set metric 101 | ||
| route-map SECONDARY permit 20 | ||
| set metric 10101 | ||
| route-map NVA-TO-NVA permit 30 | ||
| set metric 51 | ||
|
|
||
| # Peering with untrusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view untrusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_untrusted_0} remote-as ${asn_trusted} | ||
| neighbor ${ip_neighbor_untrusted_1} remote-as ${asn_trusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_untrusted_0} activate | ||
| neighbor ${ip_neighbor_untrusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_untrusted_1} activate | ||
| neighbor ${ip_neighbor_untrusted_1} soft-reconfiguration inbound | ||
| network ${gcp_landing_trusted_primary} route-map PRIMARY | ||
| network ${gcp_landing_trusted_secondary} route-map SECONDARY | ||
| network ${gcp_dev_primary} route-map PRIMARY | ||
| network ${gcp_dev_secondary} route-map SECONDARY | ||
| network ${gcp_prod_primary} route-map PRIMARY | ||
| network ${gcp_prod_secondary} route-map SECONDARY | ||
| exit-address-family | ||
|
|
||
| # Peering with trusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view trusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_trusted_0} remote-as ${asn_trusted} | ||
| neighbor ${ip_neighbor_trusted_1} remote-as ${asn_trusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_trusted_0} activate | ||
| neighbor ${ip_neighbor_trusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_trusted_1} activate | ||
| neighbor ${ip_neighbor_trusted_1} soft-reconfiguration inbound | ||
| network 0.0.0.0/0 route-map PRIMARY | ||
| exit-address-family | ||
|
|
||
| # Peering with cross-region NVAs | ||
| # (for cross-spoke communication) | ||
| router bgp ${asn_nva} view cross-nva | ||
| bgp router-id ${ip_untrusted}/32 | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_cross_region_nva_0} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_0} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_0} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_0} next-hop-self | ||
| neighbor ${ip_neighbor_cross_region_nva_1} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_1} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_1} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_1} next-hop-self | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_cross_region_nva_0} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_cross_region_nva_1} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_1} soft-reconfiguration inbound | ||
| network ${gcp_dev_primary} route-map NVA-TO-NVA | ||
| network ${gcp_prod_primary} route-map NVA-TO-NVA | ||
| exit-address-family | ||
|
|
||
| line vty |
74 changes: 74 additions & 0 deletions
74
fast/stages/2-networking-c-nva/data/bgp-configs/secondary-b.tpl
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,74 @@ | ||
| # NVA secondary-b BGP configuration | ||
|
|
||
| log syslog informational | ||
| no ipv6 forwarding | ||
| service integrated-vtysh-config | ||
|
|
||
| interface lo | ||
| ip address ${ip_untrusted}/32 | ||
|
|
||
| route-map ALLOW-ALL permit 100 | ||
| route-map PRIMARY permit 10 | ||
| set metric 100 | ||
| route-map SECONDARY permit 10 | ||
| set metric 10100 | ||
| route-map NVA-TO-NVA permit 30 | ||
| set metric 50 | ||
|
|
||
| # Peering with untrusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view untrusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_untrusted_0} remote-as ${asn_untrusted} | ||
| neighbor ${ip_neighbor_untrusted_1} remote-as ${asn_untrusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_untrusted_0} activate | ||
| neighbor ${ip_neighbor_untrusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_untrusted_0} activate | ||
| neighbor ${ip_neighbor_untrusted_1} soft-reconfiguration inbound | ||
| network ${gcp_landing_trusted_primary} route-map SECONDARY | ||
| network ${gcp_landing_trusted_secondary} route-map PRIMARY | ||
| network ${gcp_dev_primary} route-map SECONDARY | ||
| network ${gcp_dev_secondary} route-map PRIMARY | ||
| network ${gcp_prod_primary} route-map SECONDARY | ||
| network ${gcp_prod_secondary} route-map PRIMARY | ||
| exit-address-family | ||
|
|
||
| # Peering with trusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view trusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_trusted_0} remote-as ${asn_trusted} | ||
| neighbor ${ip_neighbor_trusted_1} remote-as ${asn_trusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_trusted_0} activate | ||
| neighbor ${ip_neighbor_trusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_trusted_1} activate | ||
| neighbor ${ip_neighbor_trusted_1} soft-reconfiguration inbound | ||
| network 0.0.0.0/0 route-map PRIMARY | ||
| exit-address-family | ||
|
|
||
| # Peering with cross-region NVAs | ||
| # (for cross-spoke communication) | ||
| router bgp ${asn_nva} view cross-nva | ||
| bgp router-id ${ip_untrusted}/32 | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_cross_region_nva_0} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_0} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_0} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_0} next-hop-self | ||
| neighbor ${ip_neighbor_cross_region_nva_1} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_1} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_1} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_1} next-hop-self | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_cross_region_nva_0} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_cross_region_nva_1} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_1} soft-reconfiguration inbound | ||
| network ${gcp_dev_secondary} route-map NVA-TO-NVA | ||
| network ${gcp_prod_secondary} route-map NVA-TO-NVA | ||
| exit-address-family | ||
|
|
||
| line vty |
74 changes: 74 additions & 0 deletions
74
fast/stages/2-networking-c-nva/data/bgp-configs/secondary-c.tpl
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,74 @@ | ||
| # NVA secondary-c BGP configuration | ||
|
|
||
| log syslog informational | ||
| no ipv6 forwarding | ||
| service integrated-vtysh-config | ||
|
|
||
| interface lo | ||
| ip address ${ip_untrusted}/32 | ||
|
|
||
| route-map ALLOW-ALL permit 100 | ||
| route-map PRIMARY permit 10 | ||
| set metric 101 | ||
| route-map SECONDARY permit 10 | ||
| set metric 10101 | ||
| route-map NVA-TO-NVA permit 30 | ||
| set metric 51 | ||
|
|
||
| # Peering with untrusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view untrusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_untrusted_0} remote-as ${asn_untrusted} | ||
| neighbor ${ip_neighbor_untrusted_1} remote-as ${asn_untrusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_untrusted_0} activate | ||
| neighbor ${ip_neighbor_untrusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_untrusted_1} activate | ||
| neighbor ${ip_neighbor_untrusted_1} soft-reconfiguration inbound | ||
| network ${gcp_landing_trusted_primary} route-map SECONDARY | ||
| network ${gcp_landing_trusted_secondary} route-map PRIMARY | ||
| network ${gcp_dev_primary} route-map SECONDARY | ||
| network ${gcp_dev_secondary} route-map PRIMARY | ||
| network ${gcp_prod_primary} route-map SECONDARY | ||
| network ${gcp_prod_secondary} route-map PRIMARY | ||
| exit-address-family | ||
|
|
||
| # Peering with trusted VPC Cloud Routers | ||
| router bgp ${asn_nva} view trusted | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_trusted_0} remote-as ${asn_trusted} | ||
| neighbor ${ip_neighbor_trusted_1} remote-as ${asn_trusted} | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_trusted_0} activate | ||
| neighbor ${ip_neighbor_trusted_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_trusted_1} activate | ||
| neighbor ${ip_neighbor_trusted_1} soft-reconfiguration inbound | ||
| network 0.0.0.0/0 route-map PRIMARY | ||
| exit-address-family | ||
|
|
||
| # Peering with cross-region NVAs | ||
| # (for cross-spoke communication) | ||
| router bgp ${asn_nva} view cross-nva | ||
| bgp router-id ${ip_untrusted}/32 | ||
| no bgp ebgp-requires-policy | ||
| no bgp network import-check | ||
| neighbor ${ip_neighbor_cross_region_nva_0} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_0} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_0} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_0} next-hop-self | ||
| neighbor ${ip_neighbor_cross_region_nva_1} remote-as ${asn_nva} | ||
| neighbor ${ip_neighbor_cross_region_nva_1} update-source lo | ||
| neighbor ${ip_neighbor_cross_region_nva_1} ebgp-multihop 2 | ||
| neighbor ${ip_neighbor_cross_region_nva_1} next-hop-self | ||
| address-family ipv4 unicast | ||
| neighbor ${ip_neighbor_cross_region_nva_0} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_0} soft-reconfiguration inbound | ||
| neighbor ${ip_neighbor_cross_region_nva_1} activate | ||
| neighbor ${ip_neighbor_cross_region_nva_1} soft-reconfiguration inbound | ||
| network ${gcp_prod_secondary} route-map NVA-TO-NVA | ||
| network ${gcp_dev_secondary} route-map NVA-TO-NVA | ||
| exit-address-family | ||
|
|
||
| line vty |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
30 changes: 0 additions & 30 deletions
30
fast/stages/2-networking-c-nva/data/nva-startup-script.tftpl
This file was deleted.
Oops, something went wrong.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.