frr/tests/topotests/bgp_evpn_rt5/r2/frr.conf
Christopher Dziomba fd975adfa1
topotests: add evpn vrf route leaking test
An additional VRF, 102, is introduced on both routers, importing
r1 routes from VRF 101 into VRF 102 on r2 and vice versa (both
on r2, because r1 is in netns mode and can not use route import).

RMACs and ping (from VRF 101 to VRF 102 on r1, going through r2) is
then checked.

All RMACs are created deterministically, using
52:54:00:00:<router>:<vrf> to ease debugging and checks.

Signed-off-by: Christopher Dziomba <christopher.dziomba@telekom.de>
2025-04-27 16:20:10 +02:00

91 lines
1.9 KiB
Plaintext

! debug zebra vxlan
! debug bgp neighbor-events
! debug bgp updates
! debug bgp zebra
vrf vrf-101
vni 101
exit-vrf
!
vrf vrf-102
vni 102
exit-vrf
!
interface loop101 vrf vrf-101
ip address 10.0.101.2/32
ipv6 address fd01::2/128
!
interface loop102 vrf vrf-102
ip address 10.0.102.2/32
ipv6 address fd02::2/128
!
interface r2-eth0
ip address 192.168.0.2/24
!
router bgp 65000
bgp router-id 192.168.0.2
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 192.168.0.1 peer-group
neighbor 192.168.0.1 remote-as 65000
neighbor 192.168.0.1 capability extended-nexthop
!
address-family l2vpn evpn
neighbor 192.168.0.1 activate
advertise-all-vni
exit-address-family
!
router bgp 65000 vrf vrf-101
bgp router-id 10.0.101.2
bgp log-neighbor-changes
no bgp network import-check
address-family ipv4 unicast
network 10.0.101.2/32
network 10.0.101.12/32
exit-address-family
address-family ipv6 unicast
network fd01::2/128
network fd01::12/128
exit-address-family
address-family l2vpn evpn
rd 65000:2
route-target both 65000:101
advertise ipv4 unicast route-map rmap4
advertise ipv6 unicast route-map rmap6
exit-address-family
!
router bgp 65000 vrf vrf-102
bgp router-id 10.0.102.2
bgp log-neighbor-changes
no bgp network import-check
address-family ipv4 unicast
network 10.0.102.2/32
exit-address-family
address-family ipv6 unicast
network fd02::2/128
exit-address-family
address-family l2vpn evpn
rd 65000:4
route-target both 65000:102
advertise ipv4 unicast
advertise ipv6 unicast
exit-address-family
!
access-list acl4_1 seq 10 permit 10.0.101.2/32
access-list acl4_2 seq 10 permit 10.0.101.12/32
ipv6 access-list acl6_1 seq 10 permit fd01::2/128
ipv6 access-list acl6_2 seq 10 permit fd01::12/128
route-map rmap4 permit 1
match ip address acl4_1
exit
route-map rmap4 deny 2
match ip address acl4_2
exit
route-map rmap6 permit 1
match ipv6 address acl6_1
exit
route-map rmap6 deny 2
match ipv6 address acl6_2
exit