summaryrefslogtreecommitdiff
path: root/etc/examples/bgpd.conf
diff options
context:
space:
mode:
authorjob <job@cvs.openbsd.org>2017-08-12 17:39:52 +0000
committerjob <job@cvs.openbsd.org>2017-08-12 17:39:52 +0000
commit58607d64af80ccda019a9bed71e53821c154db9c (patch)
tree1c55b5c8e41af43e0a3e839a4a807b5f6b5a09d0 /etc/examples/bgpd.conf
parent6f3032f5e11215d8373d631547af004c1276ae2f (diff)
Add manpage update for new grouping feature '{from,to} {i,e}bgp'
OK phessler@
Diffstat (limited to 'etc/examples/bgpd.conf')
-rw-r--r--etc/examples/bgpd.conf12
1 files changed, 10 insertions, 2 deletions
diff --git a/etc/examples/bgpd.conf b/etc/examples/bgpd.conf
index 7c80bfb4da0..95bc30411cf 100644
--- a/etc/examples/bgpd.conf
+++ b/etc/examples/bgpd.conf
@@ -1,4 +1,4 @@
-# $OpenBSD: bgpd.conf,v 1.5 2017/07/04 09:33:36 job Exp $
+# $OpenBSD: bgpd.conf,v 1.6 2017/08/12 17:39:51 job Exp $
# sample bgpd configuration file
# see bgpd.conf(5)
@@ -77,9 +77,17 @@ neighbor 10.2.1.1 {
aes 4e0f2f1b5c4e3c0d0e2f2d3b8c5c8f0b
}
+# do not send or use routes from EBGP neighbors without
+# further explicit configuration
+deny from ebgp
+deny to ebgp
+
+# allow updates to and from IBGP neighbors
+allow from ibgp
+allow to ibgp
+
# filter out prefixes longer than 24 or shorter than 8 bits for IPv4
# and longer than 48 or shorter than 16 bits for IPv6.
-deny from any
allow from any inet prefixlen 8 - 24
allow from any inet6 prefixlen 16 - 48