Cara Configurasi BGP Router OS v7 Indosat INP dan INIX
/ip firewall address-list
add address=157.15.78.0/23 list=advertise
add address=157.15.78.0/23 list=ke-upstream
add address=157.15.78.0/24 list=ke-upstream
add address=157.15.79.0/24 list=ke-upstream
/routing bgp template
set default as=152367 disabled=no routing-table=main
/routing bgp connection
add as=152367 connect=yes disabled=no input.filter=dari-isat-inp listen=yes local.role=ebgp name=Peer-INP output.filter-chain=ke-isat .network=ke-upstream \
remote.address=114.4.112.141/32 .as=4761 .port=179 routing-table=main templates=default
add connect=yes disabled=no input.filter=dari-isat-inix listen=yes local.role=ebgp name=Peer-INIX-1 output.filter-chain=ke-isat .network=ke-upstream \
remote.address=124.195.38.1/32 .as=17922 .port=179 routing-table=main templates=default
add connect=yes disabled=no input.filter=dari-isat-inix listen=yes local.role=ebgp name=Peer-INIX-2 output.filter-chain=ke-isat .network=ke-upstream \
remote.address=124.195.39.1/32 .as=17922 .port=179 routing-table=main templates=default
/routing filter rule
add chain=dari-mvnet disabled=yes rule="if (dst in 23.84.0.0/16 && dst-len == 16) { set blackhole yes; accept; }"
add chain=dari-mvnet disabled=yes rule="if (dst in 62.112.16.0/24 && dst-len == 24) { set blackhole yes; accept; }"
add chain=dari-mvnet disabled=yes rule="if (dst in 200.196.144.0/20 && dst-len == 20) { set blackhole yes; accept; }"
add chain=dari-iix disabled=yes rule="if (dst in 36.69.0.0/16 && dst-len == 16 && bgp-as-path-slow-legacy \"64315\") { reject; }"
add chain=dari-mvnet disabled=yes rule="if (dst in 116.254.116.0/24 && dst-len == 24 && bgp-as-path-slow-legacy \"55666\") { reject; }"
add chain=dari-mvnet disabled=yes rule="if (bgp-as-path-slow-legacy \"24211\") { reject; }"
add chain=dari-mvnet disabled=yes rule="if (dst in 103.146.31.160/27 && dst-len == 27 && bgp-as-path-slow-legacy \"64315\") { reject; }"
add chain=dari-mvnet disabled=yes rule="if (dst in 103.119.230.128/27 && dst-len == 27 && bgp-as-path-slow-legacy \"64315\") { reject; }"
add chain=dari-mvix disabled=yes rule="accept;"
add chain=dari-openixp disabled=yes rule="set bgp-weight 900; accept;"
add chain=dari-isat-inp disabled=no rule="set bgp-weight 10; accept;"
add chain=dari-isat-inix disabled=no rule="set bgp-weight 900; accept;"
add chain=dari-iix disabled=yes rule="set bgp-weight 100; accept;"
add chain=dari-mvnet disabled=yes rule="set bgp-weight 10; accept;"
add chain=dari-mvnet disabled=yes rule="reject;"
add chain=dari-mvix disabled=yes rule="reject;"
add chain=dari-iix disabled=yes rule="reject;"
add chain=dari-openixp disabled=yes rule="reject;"
add chain=dari-isat-inp disabled=no rule="reject;"
add chain=dari-isat-inix disabled=no rule="reject;"
add chain=ke-isat disabled=no rule="if (dst in 157.15.78.0/23 && dst-len == 23) { set bgp-path-prepend 3; accept; }"
add chain=ke-isat disabled=no rule="if (dst in 157.15.78.0/24 && dst-len == 24) { set bgp-path-prepend 3; accept; }"
add chain=ke-isat disabled=no rule="if (dst in 157.15.79.0/24 && dst-len == 24) { set bgp-path-prepend 3; accept; }"
add chain=ke-isat disabled=yes rule="if (dst in 157.15.78.0/24 && dst-len == 24) { accept; }"
add chain=ke-isat disabled=yes rule="if (dst in 157.15.79.0/24 && dst-len == 24) { accept; }"
add chain=ke-isat disabled=yes rule="if (dst in 157.15.78.0/23 && dst-len == 23) { accept; }"
add chain=ke-iix disabled=yes rule="if (dst in 157.15.172.0/24 && dst-len == 24) { accept; }"
add chain=ke-iix disabled=yes rule="if (dst in 157.15.173.0/24 && dst-len == 24) { accept; }"
add chain=ke-openixp disabled=yes rule="if (dst in 157.15.172.0/24 && dst-len == 24) { accept; }"
add chain=ke-openixp disabled=yes rule="if (dst in 157.15.173.0/24 && dst-len == 24) { accept; }"
add chain=ke-mvix disabled=yes rule="if (dst in 157.15.172.0/23 && dst-len == 24) { set bgp-local-pref 500; accept; }"
add chain=ke-mvnet disabled=yes rule="reject;"
add chain=ke-iix disabled=yes rule="reject;"
add chain=ke-openixp disabled=yes rule="reject;"
add chain=ke-mvix disabled=yes rule="reject;"
add chain=ke-isat disabled=no rule="reject;"
0 Response to "Cara Configurasi BGP Router OS v7 Indosat INP dan INIX"
Post a Comment