Project

General

Profile

Actions
Copy link

Feature #11405

closed

add RPKI route map in GUI

Added by Viktor Gurov about 4 years ago. Updated about 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
FRR
Target version:
-
Start date:
02/12/2021
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

Allow to select `match rpki` in the WebGUI:

pf41.lab.int(config-route-map)# match rpki 
  invalid   Invalid prefix
  notfound  Prefix not found
  valid     Valid prefix

Actions
Copy link
 #2

Updated by Jim Pingle about 4 years ago

  • Status changed from New to Pull Request Review
Actions
Copy link
 #3

Updated by Renato Botelho about 4 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Viktor Gurov

Merged

Actions
Copy link
 #4

Updated by Viktor Gurov about 4 years ago

  • Status changed from Feedback to New

"-M rpki" must be added to bgpd daemon command line,
see https://docs.frrouting.org/en/latest/bgp.html#enabling-rpki:

When first installing FRR with RPKI support from the pre-packaged binaries. Remember to add -M rpki to the variable bgpd_options in /etc/frr/daemons , like so:

bgpd_options="   -A 127.0.0.1 -M rpki"

instead of the default setting:
bgpd_options="   -A 127.0.0.1"

Otherwise you will encounter an error when trying to enter RPKI configuration mode due to the rpki module not being loaded when the BGP daemon is initialized.

Actions
Copy link
 #5

Updated by Viktor Gurov about 4 years ago

already there ('Enable BGP RPKI' option)

works as expected:

route-map RMBGPTEST deny 10
 match rpki invalid
 set as-path prepend 65001

# show route-map RMBGPTEST
ZEBRA:
route-map: RMBGPTEST Invoked: 0 Optimization: enabled Processed Change: false
 deny, sequence 10 Invoked 0
  Match clauses:
  Set clauses:
  Call clause:
  Action:
    Exit routemap
OSPF:
route-map: RMBGPTEST Invoked: 0 Optimization: enabled Processed Change: false
 deny, sequence 10 Invoked 0
  Match clauses:
  Set clauses:
  Call clause:
  Action:
    Exit routemap
BGP:
route-map: RMBGPTEST Invoked: 0 Optimization: enabled Processed Change: false
 deny, sequence 10 Invoked 0
  Match clauses:
    rpki invalid
  Set clauses:
    as-path prepend 65001
  Call clause:
  Action:
    Exit routemap

Actions
Copy link
 #6

Updated by Viktor Gurov about 4 years ago

  • Status changed from New to Resolved

frr 1.1.0_7

Actions
Copy link

Also available in: Atom PDF