Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion docs/guides/control_plane_protection/md5-session-password.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@ tags:
- Cisco missing
- Huawei VRP missing
- OpenBGPD missing
- VyOS missing
---

# MD5 session password
Expand Down Expand Up @@ -62,3 +61,11 @@ Example for setting an MD5 password:
[...]
exit
```

=== "VyOS"
VyOS has two modes (operational and configuration mode). Enter configuration mode with
`configure` to make changes. Use `commit` to apply them and `save` to keep them after reboot.
```
set protocols bgp neighbor 198.51.100.1 password mysecretpassword
set protocols bgp neighbor 3fff::1582 password mysecretpassword
```
9 changes: 8 additions & 1 deletion docs/guides/control_plane_protection/ttl-security.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@
tags:
- Huawei VRP missing
- OpenBGPD missing
- VyOS missing
- Nokia SR OS missing
---

Expand Down Expand Up @@ -69,3 +68,11 @@ Configuration examples:
ttl security 1;
}
```

=== "VyOS"
VyOS has two modes (operational and configuration mode). Enter configuration mode with
`configure` to make changes. Use `commit` to apply them and `save` to keep them after reboot.
```
set protocols bgp neighbor 198.51.100.1 ttl-security hops 1
set protocols bgp neighbor 3fff::1582 ttl-security hops 1
```
14 changes: 12 additions & 2 deletions docs/guides/route_filtering/inbound/max_prefix.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@ tags:
- Arista missing
- Huawei VRP missing
- OpenBGPD missing
- VyOS missing
---

# Maximum Prefix
Expand Down Expand Up @@ -82,4 +81,15 @@ Configuration examples:
set protocols bgp group MY_NEIGHBOR_GROUP 198.51.100.1 family inet unicast accepted-prefix-limit maximum 10 drop-excess
set protocols bgp group MY_NEIGHBOR_GROUP 2001:db8::1 family inet6 unicast accepted-prefix-limit maximum 5 drop-excess
```


=== "VyOS (>= 1.4)"

VyOS has two modes (operational and configuration mode). Enter configuration mode with
`configure` to make changes. Use `commit` to apply them and `save` to keep them after reboot.

```
set protocols bgp neighbor 198.51.100.1 address-family ipv4-unicast maximum-prefix 1000
```

It's not possible to configure a threshold value or adjust the action after limit is exceeded.

Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@ tags:
- Mikrotik missing
- Nokia SR OS missing
- OpenBGPD missing
- VyOS missing
---

# Number of BGP communities
Expand Down Expand Up @@ -125,3 +124,6 @@ BGP Communities can give a lot of information about a prefix, for example where
route-map too-many-communities permit 200
...
```

=== "VyOS"
The current VyOS configuration schema does not allow to limit the number of communities.
19 changes: 18 additions & 1 deletion docs/guides/route_filtering/inbound/own_prefix.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,6 @@ tags:
- Mikrotik missing
- Nokia SR OS missing
- OpenBGPD missing
- VyOS missing
---

# Own prefix
Expand Down Expand Up @@ -89,3 +88,21 @@ Your own networks should be stored in lists and then used in policy for external
match ip address prefix-list own
match ipv6 address prefix-list own-6
exit

=== "VyOS"
VyOS has two modes (operational and configuration mode). Enter configuration mode with
`configure` to make changes. Use `commit` to apply them and `save` to keep them after reboot.

```
set policy prefix-list own rule 5 action permit
set policy prefix-list own rule 5 prefix <PLEASE INSERT YOUR PREFIX HERE>
set policy prefix-list own rule 5 le 24

set policy prefix-list6 own-6 rule 5 action permit
set policy prefix-list6 own-6 rule 5 prefix <PLEASE INSERT YOUR PREFIX HERE>
set policy prefix-list6 own-6 rule 5 le 48

set policy route-map import rule 10 action deny
set policy route-map import rule 10 match ip address prefix-list own
set policy route-map import rule 10 match ipv6 address prefix-list own-6
```
19 changes: 18 additions & 1 deletion docs/guides/route_filtering/inbound/peering_lan.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@ tags:
- Junos missing
- Mikrotik missing
- OpenBGPD missing
- VyOS missing
---

# Peering LANs
Expand Down Expand Up @@ -150,4 +149,22 @@ and convert it to your router configuration.
commit
```

=== "VyOS"
VyOS has two modes (operational and configuration mode). Enter configuration mode with
`configure` to make changes. Use `commit` to apply them and `save` to keep them after reboot.

```
set policy prefix-list ipv4-ixplans rule 5 action permit
set policy prefix-list ipv4-ixplans rule 5 prefix 80.81.192.0/21
set policy prefix-list ipv4-ixplans rule 5 le 32

set policy prefix-list6 ipv6-ixplans rule 5 action permit
set policy prefix-list6 ipv6-ixplans rule 5 prefix 2001:7f8::/64
set policy prefix-list6 ipv6-ixplans rule 5 le 128

set policy route-map prefixes-in rule 10 action deny
set policy route-map prefixes-in rule 10 match ip address prefix-list ipv4-ixplans
set policy route-map prefixes-in rule 10 match ipv6 address prefix-list ipv6-ixplans
```

[^1]: Internet eXchange Point
10 changes: 9 additions & 1 deletion docs/guides/route_filtering/outbound/max_prefix.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@ tags:
- Mikrotik missing
- Nokia SR OS missing
- OpenBGPD missing
- VyOS missing
---

# Maximum Prefix (Outbound)
Expand All @@ -27,3 +26,12 @@ Configuration examples:
address-family ipv4 unicast
neighbor 198.51.100.1 maximum-prefix-out 1000
```

=== "VyOS (>= 1.4)"

VyOS has two modes (operational and configuration mode). Enter configuration mode with
`configure` to make changes. Use `commit` to apply them and `save` to keep them after reboot.

```
set protocols bgp neighbor 198.51.100.1 address-family ipv4-unicast maximum-prefix-out 1000
```