blob: bd64c914a42be47bcfa97a245f2b3b4fc88cedf7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
|
set interfaces bridge br50 address '192.168.0.1/24'
set interfaces bridge br50 member interface eth0.50
set interfaces bridge br50 member interface eth2
set interfaces bridge br50 member interface eth3
set interfaces dummy dum0 address '100.64.51.252/32'
set interfaces dummy dum0 address '2001:db8:200:ffff::1/128'
set interfaces dummy dum0 vrf 'vyos-test-01'
set interfaces ethernet eth0 offload gro
set interfaces ethernet eth0 offload rps
set interfaces ethernet eth0 ring-buffer rx '256'
set interfaces ethernet eth0 ring-buffer tx '256'
set interfaces ethernet eth0 vif 5 address '2001:db8:200:f0::114/64'
set interfaces ethernet eth0 vif 5 address '100.64.50.121/28'
set interfaces ethernet eth0 vif 5 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 10 address '2001:db8:200:10::ffff/64'
set interfaces ethernet eth0 vif 10 address '2001:db8:200::ffff/64'
set interfaces ethernet eth0 vif 10 address '100.64.50.62/26'
set interfaces ethernet eth0 vif 10 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 15 address '100.64.50.78/28'
set interfaces ethernet eth0 vif 15 address '2001:db8:200:15::ffff/64'
set interfaces ethernet eth0 vif 15 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 50 description 'Member of bridge br50'
set interfaces ethernet eth0 vif 110 address '100.64.51.190/27'
set interfaces ethernet eth0 vif 110 address '100.64.51.158/28'
set interfaces ethernet eth0 vif 110 address '2001:db8:200:101::ffff/64'
set interfaces ethernet eth0 vif 110 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 410 address '100.64.51.206/28'
set interfaces ethernet eth0 vif 410 address '2001:db8:200:104::ffff/64'
set interfaces ethernet eth0 vif 410 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 500 address '100.64.51.238/28'
set interfaces ethernet eth0 vif 500 address '2001:db8:200:50::ffff/64'
set interfaces ethernet eth0 vif 500 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 520 address '100.64.50.190/28'
set interfaces ethernet eth0 vif 520 address '2001:db8:200:520::ffff/64'
set interfaces ethernet eth0 vif 520 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 666 address '2001:db8:200:ff::101:1/112'
set interfaces ethernet eth0 vif 666 address '100.64.51.223/31'
set interfaces ethernet eth0 vif 666 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 800 address '2001:db8:200:ff::104:1/112'
set interfaces ethernet eth0 vif 800 address '100.64.51.212/31'
set interfaces ethernet eth0 vif 800 vrf 'vyos-test-01'
set interfaces ethernet eth0 vif 810 address '100.64.51.30/27'
set interfaces ethernet eth0 vif 810 address '2001:db8:200:102::ffff/64'
set interfaces ethernet eth0 vif 810 vrf 'vyos-test-01'
set interfaces ethernet eth1 offload gro
set interfaces ethernet eth1 offload rps
set interfaces ethernet eth1 ring-buffer rx '256'
set interfaces ethernet eth1 ring-buffer tx '256'
set interfaces ethernet eth2 offload gro
set interfaces ethernet eth3 offload gro
set interfaces loopback lo
set interfaces pppoe pppoe7 authentication password 'vyos'
set interfaces pppoe pppoe7 authentication username 'vyos'
set interfaces pppoe pppoe7 dhcpv6-options pd 0 interface br50 address '1'
set interfaces pppoe pppoe7 dhcpv6-options pd 0 length '56'
set interfaces pppoe pppoe7 ip adjust-mss '1452'
set interfaces pppoe pppoe7 ipv6 address autoconf
set interfaces pppoe pppoe7 ipv6 adjust-mss '1432'
set interfaces pppoe pppoe7 mtu '1492'
set interfaces pppoe pppoe7 no-peer-dns
set interfaces pppoe pppoe7 source-interface 'eth1'
set interfaces virtual-ethernet veth0 address '100.64.51.220/31'
set interfaces virtual-ethernet veth0 address '2001:db8:200:ff::105:1/112'
set interfaces virtual-ethernet veth0 description 'Core: connect vyos-test-01 and default VRF'
set interfaces virtual-ethernet veth0 peer-name 'veth1'
set interfaces virtual-ethernet veth1 address '100.64.51.221/31'
set interfaces virtual-ethernet veth1 address '2001:db8:200:ff::105:2/112'
set interfaces virtual-ethernet veth1 description 'Core: connect vyos-test-01 and default VRF'
set interfaces virtual-ethernet veth1 peer-name 'veth0'
set interfaces virtual-ethernet veth1 vrf 'vyos-test-01'
set interfaces wireguard wg500 address '100.64.51.209/31'
set interfaces wireguard wg500 mtu '1500'
set interfaces wireguard wg500 peer A address '192.0.2.1'
set interfaces wireguard wg500 peer A allowed-ips '0.0.0.0/0'
set interfaces wireguard wg500 peer A port '5500'
set interfaces wireguard wg500 peer A public-key 'KGSXF4QckzGe7f7CT+r6VZ5brOD/pVYk8yvrxOQ+X0Y='
set interfaces wireguard wg500 port '5500'
set interfaces wireguard wg500 private-key 'iLJh6Me6AdPJtNv3dgGhUbtyFxExxmNU4v0Fs6YE2Xc='
set interfaces wireguard wg500 vrf 'vyos-test-01'
set interfaces wireguard wg501 address '2001:db8:200:ff::102:2/112'
set interfaces wireguard wg501 mtu '1500'
set interfaces wireguard wg501 peer A address '2001:db8:300::1'
set interfaces wireguard wg501 peer A allowed-ips '::/0'
set interfaces wireguard wg501 peer A port '5501'
set interfaces wireguard wg501 peer A public-key 'OF+1OJ+VfQ0Yw1mgVtQ2ion4CnAdy8Bvx7yEiO4+Pn8='
set interfaces wireguard wg501 port '5501'
set interfaces wireguard wg501 private-key '0MP5X0PW58O4q2LDpuIXgZ0ySyAoWH8/kdpvQccCbUU='
set interfaces wireguard wg501 vrf 'vyos-test-01'
set interfaces wireguard wg666 address '172.29.0.0/31'
set interfaces wireguard wg666 mtu '1500'
set interfaces wireguard wg666 peer B allowed-ips '0.0.0.0/0'
set interfaces wireguard wg666 peer B public-key '2HT+RfwcqJMYNYzdmtmpem8Ht0dL37o31APHVwmh024='
set interfaces wireguard wg666 port '50666'
set interfaces wireguard wg666 private-key 'zvPnp2MLAoX7SotuHLFLDyy4sdlD7ttbD1xNEqA3mkU='
set nat source rule 100 outbound-interface name 'pppoe7'
set nat source rule 100 source address '192.168.0.0/24'
set nat source rule 100 translation address 'masquerade'
set policy prefix-list AS100-origin-v4 rule 10 action 'permit'
set policy prefix-list AS100-origin-v4 rule 10 prefix '100.64.0.0/12'
set policy prefix-list AS100-origin-v4 rule 100 action 'permit'
set policy prefix-list AS100-origin-v4 rule 100 prefix '0.0.0.0/0'
set policy prefix-list AS200-origin-v4 rule 10 action 'permit'
set policy prefix-list AS200-origin-v4 rule 10 prefix '10.0.0.0/8'
set policy prefix-list AS200-origin-v4 rule 20 action 'permit'
set policy prefix-list AS200-origin-v4 rule 20 prefix '172.16.0.0/12'
set policy prefix-list6 AS100-origin-v6 rule 10 action 'permit'
set policy prefix-list6 AS100-origin-v6 rule 10 prefix '2001:db8:200::/40'
set policy prefix-list6 AS200-origin-v6 rule 10 action 'permit'
set policy prefix-list6 AS200-origin-v6 rule 10 prefix '2001:db8:100::/40'
set protocols static route 100.64.50.0/23 next-hop 100.64.51.221
set protocols static route 192.0.2.255/32 interface pppoe7
set protocols static route6 2001:db8:ffff:ffff:ffff:ffff:ffff:ffff/128 interface pppoe7
set qos interface pppoe7 egress 'isp-out'
set qos policy shaper isp-out bandwidth '38mbit'
set qos policy shaper isp-out default bandwidth '100%'
set qos policy shaper isp-out default burst '15k'
set qos policy shaper isp-out default queue-limit '1000'
set qos policy shaper isp-out default queue-type 'fq-codel'
set service router-advert interface br50 prefix ::/64 preferred-lifetime '2700'
set service router-advert interface br50 prefix ::/64 valid-lifetime '5400'
set service router-advert interface eth0.500 default-preference 'high'
set service router-advert interface eth0.500 name-server '2001:db8:200::1'
set service router-advert interface eth0.500 name-server '2001:db8:200::2'
set service router-advert interface eth0.500 prefix 2001:db8:200:50::/64 valid-lifetime 'infinity'
set service router-advert interface eth0.520 default-preference 'high'
set service router-advert interface eth0.520 name-server '2001:db8:200::1'
set service router-advert interface eth0.520 name-server '2001:db8:200::2'
set service router-advert interface eth0.520 prefix 2001:db8:200:520::/64 valid-lifetime 'infinity'
set service ssh disable-host-validation
set service ssh dynamic-protection allow-from '100.64.0.0/10'
set service ssh dynamic-protection allow-from '2001:db8:200::/40'
set system config-management commit-revisions '100'
set system conntrack modules ftp
set system conntrack modules h323
set system conntrack modules nfs
set system conntrack modules pptp
set system conntrack modules sip
set system conntrack modules sqlnet
set system conntrack modules tftp
set system console device ttyS0 speed '115200'
set system domain-name 'vyos.net'
set system host-name 'vyos'
set system login user vyos authentication encrypted-password '$6$O5gJRlDYQpj$MtrCV9lxMnZPMbcxlU7.FI793MImNHznxGoMFgm3Q6QP3vfKJyOSRCt3Ka/GzFQyW1yZS4NS616NLHaIPPFHc0'
set system login user vyos authentication plaintext-password ''
set system name-server '192.168.0.1'
set system syslog global facility all level 'info'
set system syslog global facility local7 level 'debug'
set system time-zone 'Europe/Berlin'
set vrf bind-to-all
set vrf name vyos-test-01 protocols bgp address-family ipv4-unicast network 100.64.50.0/23
set vrf name vyos-test-01 protocols bgp address-family ipv6-unicast network 2001:db8:200:ffff::1/128
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.208 peer-group 'AS100v4'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 address-family ipv4-unicast default-originate
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 address-family ipv4-unicast maximum-prefix '10'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 address-family ipv4-unicast prefix-list export 'AS100-origin-v4'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 address-family ipv4-unicast prefix-list import 'AS200-origin-v4'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 address-family ipv4-unicast soft-reconfiguration inbound
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 capability dynamic
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.222 remote-as '200'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.251 peer-group 'AS100v4'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.251 shutdown
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.254 peer-group 'AS100v4'
set vrf name vyos-test-01 protocols bgp neighbor 100.64.51.254 shutdown
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ff::101:2 address-family ipv6-unicast maximum-prefix '10'
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ff::101:2 address-family ipv6-unicast prefix-list export 'AS100-origin-v6'
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ff::101:2 address-family ipv6-unicast prefix-list import 'AS200-origin-v6'
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ff::101:2 address-family ipv6-unicast soft-reconfiguration inbound
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ff::101:2 capability dynamic
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ff::101:2 remote-as '200'
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ffff::2 peer-group 'AS100v6'
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ffff::2 shutdown
set vrf name vyos-test-01 protocols bgp neighbor 2001:db8:200:ffff::a peer-group 'AS100v6'
set vrf name vyos-test-01 protocols bgp peer-group AS100v4 address-family ipv4-unicast nexthop-self
set vrf name vyos-test-01 protocols bgp peer-group AS100v4 capability dynamic
set vrf name vyos-test-01 protocols bgp peer-group AS100v4 remote-as 'internal'
set vrf name vyos-test-01 protocols bgp peer-group AS100v4 update-source 'dum0'
set vrf name vyos-test-01 protocols bgp peer-group AS100v6 address-family ipv6-unicast nexthop-self
set vrf name vyos-test-01 protocols bgp peer-group AS100v6 capability dynamic
set vrf name vyos-test-01 protocols bgp peer-group AS100v6 remote-as 'internal'
set vrf name vyos-test-01 protocols bgp peer-group AS100v6 update-source 'dum0'
set vrf name vyos-test-01 protocols bgp system-as '100'
set vrf name vyos-test-01 protocols static route 100.64.50.0/23 blackhole
set vrf name vyos-test-01 protocols static route 100.64.51.32/27 next-hop 100.64.51.5
set vrf name vyos-test-01 protocols static route 192.168.0.0/24 next-hop 100.64.51.220
set vrf name vyos-test-01 protocols static route6 2001:db8:2fe:ffff::/64 next-hop 2001:db8:200:102::5
set vrf name vyos-test-01 table '1000'
|
