144 lines
3.5 KiB
Plaintext
144 lines
3.5 KiB
Plaintext
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-1,switch-vwd-2
|
|
conf t
|
|
vlan 810
|
|
name bitpanda
|
|
end
|
|
wr mem
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-sp1, switch-vwd-sp2
|
|
conf t
|
|
vrf definition bitpanda
|
|
rd 65000:1010
|
|
address-family ipv4
|
|
exit-address-family
|
|
|
|
vlan 810
|
|
name bitpanda
|
|
|
|
vlan 101
|
|
name bitpanda-aws
|
|
|
|
ip access-list standard routes2bitpanda
|
|
permit 10.200.0.32 0.0.0.15
|
|
permit 10.201.0.0 0.0.0.15
|
|
permit 192.168.112.0 0.0.0.255
|
|
permit 192.168.220.0 0.0.0.255
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-sp1
|
|
conf t
|
|
|
|
interface vlan810
|
|
description bitpanda
|
|
vrf forwarding bitpanda
|
|
ip address 10.120.1.98 255.255.255.248
|
|
|
|
int Gi1/0/10
|
|
description Cust: VWD-Transit (bitpanda)
|
|
# vrf forwarding bitpanda
|
|
# ip address 192.168.239.26 255.255.255.254
|
|
switchport mode trunk
|
|
switchport trunk allowed vlan 102
|
|
# switchport trunk allowed vlan ...
|
|
# channel-group X mode on|active
|
|
speed nonegotiate
|
|
|
|
int Vlan102
|
|
description Cust: VWD-Transit (bitpanda)
|
|
vrf forwarding bitpanda
|
|
ip address 192.168.239.26 255.255.255.254
|
|
|
|
router bgp 65148
|
|
address-family ipv4 vrf bitpanda
|
|
bgp router-id auto-assign
|
|
redistribute static
|
|
neighbor 10.120.1.97 remote-as 65148
|
|
|
|
neighbor 10.120.1.99 remote-as 65160
|
|
neighbor 10.120.1.99 local-as 65160
|
|
|
|
neighbor 192.168.239.27 remote-as 65202
|
|
neighbor 192.168.239.27 local-as 65160
|
|
|
|
distribute-list routes2bitpanda
|
|
exit-address-family
|
|
|
|
! ip route vrf bitpanda # static routes 1
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-sp2
|
|
conf t
|
|
|
|
interface vlan810
|
|
description bitpanda
|
|
vrf forwarding bitpanda
|
|
ip address 10.120.1.99 255.255.255.248
|
|
|
|
int Gi1/0/10
|
|
description Cust: VWD-Transit (bitpanda)
|
|
# vrf forwarding bitpanda
|
|
# ip address 192.168.239.154 255.255.255.254
|
|
switchport mode trunk
|
|
switchport trunk allowed vlan 101
|
|
# switchport trunk allowed vlan ...
|
|
# channel-group X mode on|active
|
|
speed nonegotiate
|
|
|
|
|
|
int Vlan101
|
|
description Cust: VWD-Transit (bitpanda)
|
|
vrf forwarding bitpanda
|
|
ip address 192.168.239.154 255.255.255.254
|
|
|
|
router bgp 65148
|
|
address-family ipv4 vrf bitpanda
|
|
bgp router-id auto-assign
|
|
redistribute static
|
|
neighbor 10.120.1.97 remote-as 65148
|
|
|
|
neighbor 10.120.1.98 remote-as 65160
|
|
neighbor 10.120.1.98 local-as 65160
|
|
|
|
neighbor 192.168.239.155 remote-as 65201
|
|
neighbor 192.168.239.155 local-as 65160
|
|
|
|
distribute-list routes2bitpanda
|
|
exit-address-family
|
|
|
|
ip route vrf bitpanda # static routes 2
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!asa-vwd-1
|
|
conf t
|
|
interface Port-channel2.810
|
|
vlan 810
|
|
nameif bitpanda
|
|
security-level 100
|
|
ip address 10.120.1.97 255.255.255.248
|
|
|
|
access-list bitpanda_access_in extended permit icmp any any
|
|
access-list bitpanda_access_in extended deny ip any any
|
|
|
|
no monitor-interface bitpanda
|
|
|
|
access-group bitpanda_access_in in interface bitpanda
|
|
|
|
|
|
router bgp 65148
|
|
bgp log-neighbor-changes
|
|
address-family ipv4 unicast
|
|
neighbor 10.120.1.98 remote-as 65148
|
|
neighbor 10.120.1.98 description bitpanda primary weight 200
|
|
neighbor 10.120.1.98 activate
|
|
neighbor 10.120.1.98 next-hop-self
|
|
neighbor 10.120.1.98 weight 200
|
|
neighbor 10.120.1.99 remote-as 65148
|
|
neighbor 10.120.1.99 description bitpanda secondary weight 100
|
|
neighbor 10.120.1.99 activate
|
|
neighbor 10.120.1.99 next-hop-self
|
|
neighbor 10.120.1.99 weight 100
|
|
|
|
|