harrison/dn42-ansible
1
0
Fork 0
forked from 9pfs/dn42-ansible
Code Pull requests Activity

Add changes

Browse source
This commit is contained in:
9pfs 2024-12-03 09:30:54 -08:00
parent d4f1617dc2
commit 60194f68c2
Signed by: 9pfs
SSH key fingerprint: SHA256:yVO09iotyiNaBzBBvVR8ZTx7SB9VpvJPgR1Ihy1bz3Q
4 changed files with 7 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
bird-babel.j2
View file

@ -3,8 +3,8 @@
# the network. # the network.
protocol direct { protocol direct {
ipv4 { ipv4 {
import where net ~ [ 172.20.0.0/16+, 172.31.0.0/16+, 10.0.0.0/8+ ]; import where net ~ [ 172.20.0.0/14+, 172.31.0.0/16+, 10.0.0.0/8+ ];
export where net ~ [ 172.20.0.0/16+, 172.31.0.0/16+, 10.0.0.0/8+ ]; export where net ~ [ 172.20.0.0/14+, 172.31.0.0/16+, 10.0.0.0/8+ ];
}; };
ipv6 { ipv6 {
import where net ~ [ fd00::/8+ ]; import where net ~ [ fd00::/8+ ];

4
int-bgp.j2
View file

@ -6,7 +6,7 @@ template bgp intpeers {
import where source = RTS_BGP && is_valid_network() && !is_self_net(); import where source = RTS_BGP && is_valid_network() && !is_self_net();
export where source = RTS_BGP && is_valid_network() && !is_self_net(); export where source = RTS_BGP && is_valid_network() && !is_self_net();
next hop self; next hop self;
add paths yes; # add paths yes;
import table; import table;
}; };
{% endif %} {% endif %}
@ -15,7 +15,7 @@ template bgp intpeers {
import where source = RTS_BGP && is_valid_network_v6() && !is_self_net_v6(); import where source = RTS_BGP && is_valid_network_v6() && !is_self_net_v6();
export where source = RTS_BGP && is_valid_network_v6() && !is_self_net_v6(); export where source = RTS_BGP && is_valid_network_v6() && !is_self_net_v6();
next hop self; next hop self;
add paths yes; # add paths yes;
import table; import table;
}; };
} }

1
setup.yml
View file

@ -76,6 +76,7 @@
name: bird.service name: bird.service
enabled: true enabled: true
state: reloaded state: reloaded
throttle: 1
when: ansible_service_mgr == 'systemd' when: ansible_service_mgr == 'systemd'
- name: add sysctl files - name: add sysctl files
ansible.builtin.copy: ansible.builtin.copy:

4
sysctl-dn42.conf
View file

@ -3,5 +3,5 @@ net.ipv4.conf.default.forwarding=1
net.ipv6.conf.all.forwarding=1 net.ipv6.conf.all.forwarding=1
net.ipv6.conf.default.forwarding=1 net.ipv6.conf.default.forwarding=1
net.ipv4.ip_forward=1 net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=1 net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=1 net.ipv4.conf.default.rp_filter=0