I'm hoping someone will be kind enough to review my Foundry configuration, and tell me if I've missed anything obvious before I try to deploy this on a live network.
Currently we're using a Cisco 3845 for BGP to a single provider. We're migrating to a Foundry RX4, so this configuration is just my attempt at a 1-for-1 configuration. My areas of concern are: - The prefix-list and how it is matched (default deny? Matches then stops?) - The IP/virtual interface given to vlan100 in order to have an IP usable for the 1/13 to 1/16 trunk. This is quite different than what was done with the Cisco. - Any defaults the Cisco may have relied on that the Foundry isn't configured to match Below is the sanitized configuration. I appreciate any help. Chris Current configuration: ! ver V2.4.0eT143 module 1 rx-bi-1g-24-port-fiber module 2 rx-bi-1g-24-port-fiber ! trunk ethe 1/13 to 1/16 ! spanning-tree ! vlan 100 untagged ethe 1/13 to 1/16 router-interface ve 1 ! vlan 1 name DEFAULT-VLAN ! ! ! aaa authentication login default radius local radius-server host 192.168.10.100 auth-port 1645 acct-port 1646 authentication-only key 1 ... radius-server host 192.168.10.101 auth-port 1645 acct-port 1646 authentication-only key 1 ... clock timezone gmt GMT-07 sntp server 192.168.11.20 enable super-user-password ..... logging host 192.168.12.50 no telnet server username root password ..... no web-management ! ip prefix-list LinkOut description "Link outbound advertisements" ip prefix-list LinkOut seq 5 permit 207.46.236.0/24 ip prefix-list LinkOut seq 10 deny 192.168.0.0/16 ip prefix-list LinkOut seq 15 deny 127.0.0.0/8 ip prefix-list LinkOut seq 20 deny 172.16.0.0/12 ip prefix-list LinkOut seq 25 deny 10.0.0.0/8 ip prefix-list LinkOut seq 30 deny 0.0.0.0/0 ! ip prefix-list LinkIn description "Link inbound routes" ip prefix-list LinkIn seq 5 deny 207.46.236.0/24 ip prefix-list LinkIn seq 10 deny 10.0.0.0/8 ip prefix-list LinkIn seq 15 deny 172.16.0.0/12 ip prefix-list LinkIn seq 20 deny 192.168.0.0/16 ip prefix-list LinkIn seq 25 deny 127.0.0.0/8 ip prefix-list LinkIn seq 30 permit 0.0.0.0/0 ip route 192.168.0.0/16 192.168.1.1 ! interface management 1 ip address 192.168.1.25/24 ! interface ethernet 1/1 port-name External Link ip address 207.46.10.20/29 ! interface ve 1 ip address 207.46.236.1/27 ! ! ! router bgp local-as 8071 neighbor 207.46.10.9 remote-as 8075 neighbor 207.46.10.9 shutdown neighbor 207.46.10.9 password 1 ... address-family ipv4 unicast network 207.46.236.0/24 neighbor 207.46.10.9 prefix-list LinkIn in neighbor 207.46.10.9 prefix-list LinkOut out exit-address-family address-family ipv4 multicast exit-address-family address-family ipv6 unicast exit-address-family address-family ipv6 multicast exit-address-family ! ! ! ! ---- BEGIN SSH2 PUBLIC KEY ---- Comment: RomSecureShell DSA Public key SSH key here ... ---- END SSH2 PUBLIC KEY ---- ! ! end _______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
