mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-10-26 08:41:46 +01:00
routing: adjust chapter headers
This commit is contained in:
parent
7929d33885
commit
5b2cde1eaa
@ -16,6 +16,6 @@ Routing
|
||||
ospf
|
||||
pbr
|
||||
rip
|
||||
routing-policy
|
||||
policy
|
||||
rpki
|
||||
static
|
||||
|
||||
@ -1,7 +1,8 @@
|
||||
.. _routing-mss-clamp:
|
||||
|
||||
################
|
||||
TCP-MSS Clamping
|
||||
----------------
|
||||
################
|
||||
|
||||
As Internet wide PMTU discovery rarely works, we sometimes need to clamp
|
||||
our TCP MSS value to a specific value. This is a field in the TCP
|
||||
@ -18,16 +19,15 @@ value for IPv4 and IPv6.
|
||||
|
||||
|
||||
IPv4
|
||||
^^^^
|
||||
====
|
||||
|
||||
.. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
|
||||
|
||||
Use this command to set the maximum segment size for IPv4 transit
|
||||
packets on a specific interface (500-1460 bytes).
|
||||
|
||||
|
||||
Example
|
||||
"""""""
|
||||
-------
|
||||
|
||||
Clamp outgoing MSS value in a TCP SYN packet to `1452` for `pppoe0` and
|
||||
`1372`
|
||||
@ -39,16 +39,15 @@ for your WireGuard `wg02` tunnel.
|
||||
set firewall options interface wg02 adjust-mss '1372'
|
||||
|
||||
IPv6
|
||||
^^^^^
|
||||
====
|
||||
|
||||
.. cfgcmd:: set firewall options interface <interface> adjust-mss6 <number-of-bytes>
|
||||
|
||||
Use this command to set the maximum segment size for IPv6 transit
|
||||
packets on a specific interface (1280-1492 bytes).
|
||||
|
||||
|
||||
Example
|
||||
"""""""
|
||||
-------
|
||||
|
||||
Clamp outgoing MSS value in a TCP SYN packet to `1280` for both `pppoe0` and
|
||||
`wg02` interface.
|
||||
|
||||
@ -7,7 +7,6 @@ Multicast
|
||||
VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**,
|
||||
**IGMP** and **IGMP-Proxy**.
|
||||
|
||||
|
||||
************
|
||||
PIM and IGMP
|
||||
************
|
||||
|
||||
@ -2,8 +2,9 @@
|
||||
|
||||
.. _routing-ospf:
|
||||
|
||||
####
|
||||
OSPF
|
||||
----
|
||||
####
|
||||
|
||||
:abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet
|
||||
Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls
|
||||
@ -16,7 +17,7 @@ addressing model.
|
||||
OSPF is a widely used IGP in large enterprise networks.
|
||||
|
||||
OSPFv2 (IPv4)
|
||||
^^^^^^^^^^^^^
|
||||
#############
|
||||
|
||||
In order to have a VyOS system exchanging routes with OSPF neighbors, you will
|
||||
at least need to configure an OSPF area and some network.
|
||||
@ -68,7 +69,7 @@ address and the node 1 sending the default route:
|
||||
set policy route-map CONNECT rule 10 match interface lo
|
||||
|
||||
OSPFv3 (IPv6)
|
||||
^^^^^^^^^^^^^
|
||||
#############
|
||||
|
||||
A typical configuration using 2 nodes.
|
||||
|
||||
|
||||
@ -2,8 +2,9 @@
|
||||
|
||||
.. _routing-pbr:
|
||||
|
||||
###
|
||||
PBR
|
||||
---
|
||||
###
|
||||
|
||||
:abbr:`PBR (Policy-Based Routing)` allowing traffic to be assigned to
|
||||
different routing tables. Traffic can be matched using standard 5-tuple
|
||||
@ -11,7 +12,7 @@ matching (source address, destination address, protocol, source port,
|
||||
destination port).
|
||||
|
||||
Transparent Proxy
|
||||
^^^^^^^^^^^^^^^^^
|
||||
=================
|
||||
|
||||
The following example will show how VyOS can be used to redirect web
|
||||
traffic to an external transparent proxy:
|
||||
@ -45,7 +46,7 @@ interface, we use:
|
||||
|
||||
|
||||
Multiple Uplinks
|
||||
^^^^^^^^^^^^^^^^
|
||||
================
|
||||
|
||||
VyOS Policy-Based Routing (PBR) works by matching source IP address
|
||||
ranges and forwarding the traffic using different routing tables.
|
||||
|
||||
@ -1,32 +1,35 @@
|
||||
.. include:: ../_include/need_improvement.txt
|
||||
|
||||
Routing-policy
|
||||
--------------
|
||||
######
|
||||
Policy
|
||||
######
|
||||
|
||||
Routing Policies could be used to tell the router (self or neighbors) what routes and their attributes needs to be put into the routing table.
|
||||
Routing Policies could be used to tell the router (self or neighbors) what
|
||||
routes and their attributes needs to be put into the routing table.
|
||||
|
||||
There could be a wide range of routing policies. Some examples are below:
|
||||
|
||||
* Set some metric to routes learned from a particular neighbor
|
||||
* Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
|
||||
* Prefer a specific routing protocol routes over another routing protocol running on the same router
|
||||
* Set some metric to routes learned from a particular neighbor
|
||||
* Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
|
||||
* Prefer a specific routing protocol routes over another routing protocol running on the same router
|
||||
|
||||
Routing Policy Example
|
||||
~~~~~~~~~~~~~~~~~~~~~~
|
||||
Example
|
||||
=======
|
||||
|
||||
**Policy definition:**
|
||||
|
||||
.. code-block:: none
|
||||
|
||||
#Create policy
|
||||
# Create policy
|
||||
set policy route-map setmet rule 2 action 'permit'
|
||||
set policy route-map setmet rule 2 set as-path-prepend '2 2 2'
|
||||
|
||||
#Apply policy to BGP
|
||||
# Apply policy to BGP
|
||||
set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast route-map import 'setmet'
|
||||
set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast soft-reconfiguration 'inbound' <<<< ***
|
||||
set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast soft-reconfiguration 'inbound'
|
||||
|
||||
*** get policy update without bouncing the neighbor
|
||||
Using 'soft-reconfiguration' we get the policy update without bouncing the
|
||||
neighbor.
|
||||
|
||||
**Routes learned before routing policy applied:**
|
||||
|
||||
@ -54,7 +57,9 @@ Routing Policy Example
|
||||
Origin codes: i - IGP, e - EGP, ? - incomplete
|
||||
|
||||
Network Next Hop Metric LocPrf Weight Path
|
||||
*> 198.51.100.3/32 203.0.113.2 1 0 2 2 2 2 i < longer AS_path length
|
||||
*> 198.51.100.3/32 203.0.113.2 1 0 2 2 2 2 i
|
||||
|
||||
Total number of prefixes 1
|
||||
vyos@vos1:~$
|
||||
|
||||
You now see the longer AS path.
|
||||
@ -2,8 +2,9 @@
|
||||
|
||||
.. _rip:
|
||||
|
||||
###
|
||||
RIP
|
||||
---
|
||||
###
|
||||
|
||||
:abbr:`RIP (Routing Information Protocol)` is a widely deployed interior gateway
|
||||
protocol. RIP was developed in the 1970s at Xerox Labs as part of the XNS
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user