Skip to content

Commit 845e489

Browse files
committed
Merge branch '517' into stage
2 parents 4f6ac87 + 22956b4 commit 845e489

2 files changed

Lines changed: 15 additions & 11 deletions

File tree

content/cumulus-linux-516/Layer-3/Border-Gateway-Protocol-BGP/Optional-BGP-Configuration.md

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1753,7 +1753,7 @@ The following table describes the `prefix limit` options.
17531753

17541754
| Option | Description |
17551755
| -------- | ------------ |
1756-
| `maximum` | The maximum number of unreachability prefixes that the switch can receive from the peer or peer group. This is critical for security to prevent state exhaustion. |
1756+
| `inbound maximum` | The maximum number of unreachability prefixes that the switch can receive from the peer or peer group. This is critical for security to prevent state exhaustion. |
17571757
| `reestablish-wait` | The time in minutes to wait before establishing the BGP session again with the peer or peer group. You can specify a value between 1 and 65535, or `auto`. The default value is `auto`, which uses standard BGP timers and processing. |
17581758
| `warning-only` | When enabled, the switch only generates a syslog warning if the number of received unreachability prefixes exceeds the limit. |
17591759
| `warning-threshold` | The percentage of the maximum at which a syslog warning is generated. You can specify a value between 1 and 100. The default value is 75.|
@@ -1783,10 +1783,10 @@ cumulus@leaf01:~$ nv set vrf default router bgp address-family ipv6-unreachabili
17831783
cumulus@leaf01:~$ nv set vrf default router bgp address-family ipv6-unreachability advertise-origin
17841784
cumulus@leaf01:~$ nv set vrf default router bgp address-family ipv6-unreachability advertise-unreach interfaces-match 2001:1:1::/48
17851785
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ipv6-unreachability state enabled
1786-
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ipv6-unreachability prefix-limits maximum 6
1786+
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ipv6-unreachability prefix-limits inbound maximum 6
17871787
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ipv6-unreachability aspath allow-my-asn origin enabled
17881788
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability state enabled
1789-
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability prefix-limits maximum 6
1789+
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability prefix-limits inbound maximum 6
17901790
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability aspath allow-my-asn origin enabled
17911791
cumulus@leaf01:~$ nv config apply
17921792
```
@@ -1799,7 +1799,7 @@ The following example enables BGP unreachability SAFI for IPv6 globally and on p
17991799
```
18001800
cumulus@spine01:~$ nv set vrf default router bgp address-family ipv6-unreachability state enabled
18011801
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-LEAF address-family ipv6-unreachability state enabled
1802-
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-LEAF address-family ipv6-unreachability prefix-limits maximum 6
1802+
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-LEAF address-family ipv6-unreachability prefix-limits inbound maximum 6
18031803
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-SUPERSPINE address-family ipv6-unreachability state enabled
18041804
cumulus@spine01:~$ nv config apply
18051805
```
@@ -1937,8 +1937,9 @@ For a peer group, run the `nv show vrf <vrf> router bgp peer-group <peer-group-i
19371937
cumulus@leaf01:~$ nv show vrf default router bgp neighbor swp51 address-family ipv6-unreachability prefix-limits
19381938
operational applied
19391939
----------------- ----------- -------
1940-
maximum 6
1941-
warning-threshold 75
1940+
inbound
1941+
maximum 6
1942+
warning-threshold 75
19421943
```
19431944

19441945
To show the BGP unreachability AS path configuration for a peer, run the `nv show vrf <vrf> router bgp neighbor <neighbor-id> address-family <address-family>-unreachability aspath` command.

content/cumulus-linux-517/Layer-3/Border-Gateway-Protocol-BGP/Optional-BGP-Configuration.md

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1753,7 +1753,7 @@ The following table describes the `prefix limit` options.
17531753

17541754
| Option | Description |
17551755
| -------- | ------------ |
1756-
| `maximum` | The maximum number of unreachability prefixes that the switch can receive from the peer or peer group. This is critical for security to prevent state exhaustion. |
1756+
| `inbound maximum` | The maximum number of unreachability prefixes that the switch can receive from the peer or peer group. This is critical for security to prevent state exhaustion. |
17571757
| `reestablish-wait` | The time in minutes to wait before establishing the BGP session again with the peer or peer group. You can specify a value between 1 and 65535, or `auto`. The default value is `auto`, which uses standard BGP timers and processing. |
17581758
| `warning-only` | When enabled, the switch only generates a syslog warning if the number of received unreachability prefixes exceeds the limit. |
17591759
| `warning-threshold` | The percentage of the maximum at which a syslog warning is generated. You can specify a value between 1 and 100. The default value is 75.|
@@ -1786,7 +1786,7 @@ cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ip
17861786
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ipv6-unreachability prefix-limits maximum 6
17871787
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp51 address-family ipv6-unreachability aspath allow-my-asn origin enabled
17881788
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability state enabled
1789-
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability prefix-limits maximum 6
1789+
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability prefix-limits inbound maximum 6
17901790
cumulus@leaf01:~$ nv set vrf default router bgp neighbor swp52 address-family ipv6-unreachability aspath allow-my-asn origin enabled
17911791
cumulus@leaf01:~$ nv config apply
17921792
```
@@ -1799,7 +1799,7 @@ The following example enables BGP unreachability SAFI for IPv6 globally and on p
17991799
```
18001800
cumulus@spine01:~$ nv set vrf default router bgp address-family ipv6-unreachability state enabled
18011801
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-LEAF address-family ipv6-unreachability state enabled
1802-
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-LEAF address-family ipv6-unreachability prefix-limits maximum 6
1802+
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-LEAF address-family ipv6-unreachability prefix-limits inbound maximum 6
18031803
cumulus@spine01:~$ nv set vrf default router bgp peer-group UNDERLAY-SUPERSPINE address-family ipv6-unreachability state enabled
18041804
cumulus@spine01:~$ nv config apply
18051805
```
@@ -1937,8 +1937,11 @@ For a peer group, run the `nv show vrf <vrf> router bgp peer-group <peer-group-i
19371937
cumulus@leaf01:~$ nv show vrf default router bgp neighbor swp51 address-family ipv6-unreachability prefix-limits
19381938
operational applied
19391939
----------------- ----------- -------
1940-
maximum 6
1941-
warning-threshold 75
1940+
------------------- ----------- -------
1941+
1942+
inbound
1943+
maximum 6
1944+
warning-threshold 75
19421945
```
19431946

19441947
To show the BGP unreachability AS path configuration for a peer, run the `nv show vrf <vrf> router bgp neighbor <neighbor-id> address-family <address-family>-unreachability aspath` command.

0 commit comments

Comments
 (0)