Differences
This shows you the differences between two versions of the page.
| en:dpi:bras_bng:use_cases:brasl2softrouter:start [2023/08/30 08:57] – created elena.krasnobryzh | en:dpi:bras_bng:use_cases:brasl2softrouter:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== | ||
| - | {{indexmenu_n> | ||
| - | The Soft-Router feature is used to announce NAT Pool subnets and authorized subscriber IP addresses for BNG L2-connected using dynamic routing protocols (BGP, OSPF, IS-IS). The principle of operation and configuration is described in the [[en: | ||
| - | ==== Use case description: | ||
| - | The SSG (2x10G in port, 2x10G out port) is implemented in-line of 2x10G links, which are aggregated in LAG. The SSG is configured in BRAS L2 PPPoE mode, NAT Pool 100.0.0.0/ | ||
| - | {{ dpi: | ||
| - | |||
| - | In this scenario we will assume that the docking network is 192.168.123.64/ | ||
| - | Let's configure FRR as a router with a CLI most similar to the usual and familiar to cisco-like operators. | ||
| - | The out-interface of the SSG, in this case 13-00.0, is specified as the interface from which traffic will be diverted. | ||
| - | |||
| - | === SSG (FastDPI) configuration: | ||
| - | |||
| - | / | ||
| - | |||
| - | router=1 | ||
| - | router_kernel_table=254 | ||
| - | router_subs_announce=6 | ||
| - | router_netns=router | ||
| - | router_device { | ||
| - | | ||
| - | device=13-00.0 | ||
| - | tap=dpi | ||
| - | peer=rib | ||
| - | subnet=192.168.123.65/ | ||
| - | subnet=224.0.0.5/ | ||
| - | subnet=224.0.0.6/ | ||
| - | } | ||
| - | |||
| - | |||
| - | |||
| - | === Netns configuration: | ||
| - | |||
| - | ip netns add router | ||
| - | ip link add dpi type veth peer name rib netns router | ||
| - | ip netns exec router ip address add 192.168.123.65/ | ||
| - | ip netns exec router ip link set dev rib arp on | ||
| - | ip netns exec router ethtool -K rib tx off | ||
| - | ip link set dev dpi arp off | ||
| - | echo 1>/ | ||
| - | ip link set dpi up | ||
| - | ip netns exec router ip link set lo up | ||
| - | ip netns exec router ip link set rib up | ||
| - | firewall-cmd --zone=internal --add-source=192.168.123.65/ | ||
| - | firewall-cmd --zone=internal --add-rich-rule=' | ||
| - | |||
| - | We recommend adding these commands to the script and then adding the script to autorun. | ||
| - | |||
| - | === FRR daemons setup: == | ||
| - | / | ||
| - | |||
| - | < | ||
| - | ospfd=yes | ||
| - | ospf6d=yes | ||
| - | ripd=no | ||
| - | ripngd=no | ||
| - | isisd=no | ||
| - | pimd=no | ||
| - | nhrpd=no | ||
| - | eigrpd=no | ||
| - | sharpd=no | ||
| - | pbrd=no | ||
| - | bfdd=no | ||
| - | fabricd=no | ||
| - | vrrpd=no | ||
| - | |||
| - | vtysh_enable=yes | ||
| - | zebra_options=" | ||
| - | bgpd_options=" | ||
| - | ospfd_options=" | ||
| - | ospf6d_options=" | ||
| - | ripd_options=" | ||
| - | ripngd_options=" | ||
| - | isisd_options=" | ||
| - | pimd_options=" | ||
| - | nhrpd_options=" | ||
| - | eigrpd_options=" | ||
| - | sharpd_options=" | ||
| - | pbrd_options=" | ||
| - | staticd_options=" | ||
| - | bfdd_options=" | ||
| - | fabricd_options=" | ||
| - | vrrpd_options=" | ||
| - | </ | ||
| - | |||
| - | |||
| - | === FRR (OSPF) setup: === | ||
| - | |||
| - | / | ||
| - | |||
| - | frr version 7.5 | ||
| - | frr defaults traditional | ||
| - | hostname bras-demo-01 | ||
| - | no ip forwarding | ||
| - | no ipv6 forwarding | ||
| - | no service integrated-vtysh-config | ||
| - | ! | ||
| - | vrf router | ||
| - | netns / | ||
| - | | ||
| - | ! | ||
| - | router ospf vrf router | ||
| - | | ||
| - | ! | ||
| - | line vty | ||
| - | ! | ||
| - | |||
| - | === FRR (BGP) setup: === | ||
| - | |||
| - | / | ||
| - | |||
| - | frr version 7.5 | ||
| - | frr defaults traditional | ||
| - | hostname bras-demo-01 | ||
| - | log file / | ||
| - | log syslog | ||
| - | no ip forwarding | ||
| - | no ipv6 forwarding | ||
| - | service integrated-vtysh-config | ||
| - | ! | ||
| - | router bgp 65501 vrf router | ||
| - | bgp router-id 192.168.123.65 | ||
| - | | ||
| - | ! | ||
| - | | ||
| - | redistribute kernel | ||
| - | neighbor 192.168.123.66 route-map PERMIT_ALL in | ||
| - | neighbor 192.168.123.66 route-map PERMIT_ALL out | ||
| - | neighbor 192.168.123.66 soft-reconfiguration inbound | ||
| - | exit address-family | ||
| - | ! | ||
| - | route-map PERMIT_ALL permit 10 | ||
| - | ! | ||
| - | line vty | ||
| - | ! | ||