Wanguard 6.2 User Guide
Appendix 4 – Network Integration Guideline for Wanguard Filter
}
}
Start ExaBGP with a command such as:
env exabgp.daemon.user=root exabgp.daemon.daemonize=true
exabgp.daemon.pid=/var/run/exabgp.pid exabgp.log.destination=/var/log/exabgp.log exabgp
/etc/exabgp_example.conf
Verify that ExaBGP starts and functions correctly by inspecting /var/log/exabgp.log.
Wanguard connects to ExaBGP using the BGP Connector component documented on page 51.
Cisco Router BGP Configuration
This section describes the router's BGP configuration used when configuring traffic diversion. The syntax of
the commands is taken from the BGP configuration on a Cisco router. The following configuration steps show the
commands used to configure BGP on a Cisco router:
r7200(config)# ip bgp-community new-format
r7200(config)# ip community-list standard
<Wanguard-Filter-community-name>
permit no-
advertise
r7200(config)# ip community-list standard
<Wanguard-Filter-community-name>
permit
<Wanguard-
Filter-community>
r7200(config)# route-map
Wanguard-Filter-in
permit 10
r7200(config-route-map)# match community
<Wanguard-Filter-community-name>
exact
r7200(config-route-map)# exit
r7200(config)# route-map
Wanguard-Filter-out
deny 10
r7200(config-route-map)# exit
r7200(config)# router bgp
<Router-AS-number>
r7200(config-router)# bgp log-neighbor-changes
r7200(config-router)# neighbor
<Wanguard-Filter-IP-address>
remote-as
<Wanguard-Filter-ASn>
r7200(config-router)# neighbor
<Wanguard-Filter-IP-address>
description
<description>
r7200(config-router)# neighbor
<Wanguard-Filter-IP-address>
soft-reconfiguration-inbound
r7200(config-router)# neighbor
<Wanguard-Filter-IP-address>
route-map
Wanguard-Filter-out
out
r7200(config-router)# neighbor
<Wanguard-Filter-IP-address>
route-map
Wanguard-Filter-in
in
r7200(config-router)# exit
To display the router configuration, enter the
show running-config
command from the router global
command level. In the following example, the router's AS number is 1000 and the BGPd AS number is 64000. The
following partial output is displayed:
r7200# show running-config
... skipped ...
router bgp 1000
bgp log-neighbor-changes
neighbor 192.168.1.100 remote-as 64000
neighbor 192.168.1.100 description Filter appliance
neighbor 192.168.1.100 soft-reconfiguration inbound
neighbor 192.168.1.100 route-map Wanguard-Filter-out out
- 117 -
Summary of Contents for wanguard 6.2
Page 1: ......
