clerie
/
nixfiles
1
0
Fork 0
Code

Enable roa for ildix

This commit is contained in:
clerie 2021-01-15 18:10:40 +01:00
parent f3f27b9e5f
commit 166b35700a
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
hosts/dn42-ildix-clerie/configuration.nix
View File

@ -44,7 +44,23 @@
};
}
roa6 table r6;
protocol rpki {
debug all;
roa6 { table r6; };
remote fd81:edb3:71d8:ffff::20 port 8282;
retry keep 5;
refresh keep 30;
expire 600;
}
filter import_dn42 {
if (roa_check(r6, net, bgp_path.last) = ROA_INVALID) then reject;
if net ~ [fd81:edb3:71d8::/48{48,128}] then reject;
if net ~ [fd00::/8{8,64}] then accept;
reject;