0
0
mirror of https://gitlab.nic.cz/labs/bird.git synced 2024-12-23 10:11:53 +00:00
bird/doc/bird.conf.example

223 lines
6.2 KiB
Plaintext
Raw Normal View History

1998-11-27 19:39:16 +00:00
/*
2016-12-07 18:16:02 +00:00
* This is an example configuration file
* (for version 1.x.x, obsolete)
1998-11-27 19:39:16 +00:00
*/
2000-05-08 22:33:50 +00:00
# Yes, even shell-like comments work...
1998-11-27 19:39:16 +00:00
2000-05-08 22:33:50 +00:00
# Configure logging
#log syslog { debug, trace, info, remote, warning, error, auth, fatal, bug };
#log stderr all;
#log "tmp" all;
2000-05-08 22:33:50 +00:00
# Override router ID
#router id 198.51.100.1;
2000-05-08 22:33:50 +00:00
# You can define your own symbols...
2010-02-10 11:30:14 +00:00
#define xyzzy = (120+10);
#define '1a-a1' = (30+40);
2000-05-08 22:33:50 +00:00
# Define a route filter...
2010-04-09 15:42:39 +00:00
#filter test_filter {
# if net ~ 10.0.0.0/16 then accept;
# else reject;
#}
2000-05-08 22:33:50 +00:00
#filter sink { reject; }
#filter okay { accept; }
2011-09-11 19:21:47 +00:00
#include "filters.conf";
2000-05-08 22:33:50 +00:00
# Define another routing table
#table testable;
2000-05-08 22:33:50 +00:00
# Turn on global debugging of all protocols
#debug protocols all;
# Turn on internal watchdog
#watchdog warning 5 s;
#watchdog timeout 30 s;
2000-05-08 22:33:50 +00:00
# The direct protocol automatically generates device routes to
# all network interfaces. Can exist in as many instances as you wish
# if you want to populate multiple routing tables with device routes.
2010-04-09 15:42:39 +00:00
#protocol direct {
2000-05-08 22:33:50 +00:00
# interface "-eth*", "*"; # Restrict network interfaces it works with
2010-04-09 15:42:39 +00:00
#}
2000-05-08 22:33:50 +00:00
# This pseudo-protocol performs synchronization between BIRD's routing
# tables and the kernel. If your kernel supports multiple routing tables
# (as Linux 2.2.x does), you can run multiple instances of the kernel
# protocol and synchronize different kernel tables with different BIRD tables.
protocol kernel {
2000-05-08 22:33:50 +00:00
# learn; # Learn all alien routes from the kernel
persist; # Don't remove routes on bird shutdown
scan time 20; # Scan kernel routing table every 20 seconds
# import none; # Default is import all
export all; # Default is export none
# kernel table 5; # Kernel table to synchronize with (default: main)
}
2000-05-08 22:33:50 +00:00
# This pseudo-protocol watches all interface up/down events.
protocol device {
scan time 10; # Scan interfaces every 10 seconds
}
2000-05-08 22:33:50 +00:00
# Static routes (again, there can be multiple instances, so that you
# can disable/enable various groups of static routes on the fly).
protocol static {
2000-05-08 22:33:50 +00:00
# disabled; # Disable by default
# table testable; # Connect to a non-default table
# preference 1000; # Default preference of routes
# debug { states, routes, filters, interfaces, events, packets };
# debug all;
# route 0.0.0.0/0 via 198.51.100.13;
# route 198.51.100.0/25 unreachable;
# route 10.0.0.0/8 unreachable;
# route 10.1.1.0:255.255.255.0 via 198.51.100.3;
# route 10.1.2.0:255.255.255.0 via 198.51.100.3;
# route 10.1.3.0:255.255.255.0 via 198.51.100.4;
# route 10.2.0.0/24 via "arc0";
}
2000-05-08 22:33:50 +00:00
# Pipe protocol connects two routing tables... Beware of loops.
#protocol pipe {
# peer table testable;
2000-05-08 22:33:50 +00:00
# Define what routes do we export to this protocol / import from it.
# import all; # default is all
# export all; # default is none
# import none; # If you wish to disable imports
# import filter test_filter; # Use named filter
# import where source = RTS_DEVICE; # Use explicit filter
#}
# RIP aka Rest In Pieces...
#protocol rip MyRIP { # You can also use an explicit name
# preference xyzzy;
# debug all;
# port 1520;
# period 7;
# infinity 16;
# garbage time 60;
2000-05-08 22:33:50 +00:00
# interface "*" { mode broadcast; };
# honor neighbor; # To whom do we agree to send the routing table
# honor always;
# honor never;
2010-02-20 20:09:40 +00:00
# passwords {
# password "nazdar";
# };
2000-05-08 22:33:50 +00:00
# authentication none;
# import filter { print "importing"; accept; };
# export filter { print "exporting"; accept; };
#}
2000-06-05 21:09:03 +00:00
#protocol ospf MyOSPF {
# tick 2;
2000-06-05 21:09:03 +00:00
# rfc1583compat yes;
# area 0.0.0.0 {
# stub no;
# interface "eth*" {
# hello 9;
# retransmit 6;
# cost 10;
2004-07-16 08:01:32 +00:00
# transmit delay 5;
2000-06-05 21:09:03 +00:00
# dead count 5;
# wait 50;
# type broadcast;
2000-06-06 01:23:03 +00:00
# authentication simple;
# password "pass";
2000-06-05 21:09:03 +00:00
# };
2000-06-06 00:21:06 +00:00
# interface "arc0" {
# rx buffer large;
2000-06-06 00:21:06 +00:00
# type nonbroadcast;
2000-09-02 00:14:46 +00:00
# poll 14;
# dead 75;
2000-06-06 00:21:06 +00:00
# neighbors {
2000-09-02 00:14:46 +00:00
# 10.1.1.2 eligible;
2000-06-06 00:21:06 +00:00
# 10.1.1.4;
# };
2000-09-02 00:14:46 +00:00
# strict nonbroadcast yes;
2000-06-06 00:21:06 +00:00
# };
2005-02-12 22:27:55 +00:00
# interface "xxx0" {
# passwords {
# password "abc" {
# id 1;
# generate to "22-04-2003 11:00:06";
# accept to "17-01-2004 12:01:05";
# };
# password "def" {
# id 2;
# generate from "22-04-2003 11:00:07";
# accept from "17-01-2003 12:01:05";
# };
2010-02-20 20:09:40 +00:00
# };
2005-02-12 22:27:55 +00:00
# authentication cryptographic;
# };
2000-06-05 21:09:03 +00:00
# };
# area 20 {
# stub 1;
# interface "ppp1" {
# hello 8;
2000-06-06 01:23:03 +00:00
# authentication none;
2000-06-05 21:09:03 +00:00
# };
# interface "fr*";
# virtual link 192.168.0.1 {
# password "sdsdffsdfg";
# authentication cryptographic;
# };
2000-06-05 21:09:03 +00:00
# };
#}
2000-06-05 21:09:03 +00:00
2000-05-08 22:33:50 +00:00
#protocol bgp {
# disabled;
2010-02-20 20:09:40 +00:00
# description "My BGP uplink";
2000-05-08 22:33:50 +00:00
# local as 65000;
# neighbor 198.51.100.130 as 64496;
2011-04-05 09:41:18 +00:00
# multihop;
2000-05-08 22:33:50 +00:00
# hold time 240;
# startup hold time 240;
# connect retry time 120;
# keepalive time 80; # defaults to hold time / 3
# start delay time 5; # How long do we wait before initial connect
# error wait time 60, 300;# Minimum and maximum time we wait after an error (when consecutive
# # errors occur, we increase the delay exponentially ...
# error forget time 300; # ... until this timeout expires)
# disable after error; # Disable the protocol automatically when an error occurs
# next hop self; # Disable next hop processing and always advertise our local address as nexthop
# path metric 1; # Prefer routes with shorter paths (like Cisco does)
# default bgp_med 0; # MED value we use for comparison when none is defined
# default bgp_local_pref 0; # The same for local preference
# source address 198.51.100.14; # What local address we use for the TCP connection
2010-02-20 20:09:40 +00:00
# password "secret"; # Password used for MD5 authentication
# rr client; # I am a route reflector and the neighor is my client
# rr cluster id 1.0.0.1; # Use this value for cluster id instead of my router id
2000-05-08 22:33:50 +00:00
# export where source=RTS_STATIC;
# export filter {
# if source = RTS_STATIC then {
2010-02-20 20:09:40 +00:00
# bgp_community = -empty-; bgp_community = add(bgp_community,(65000,5678));
# bgp_origin = 0;
2000-05-08 22:33:50 +00:00
# bgp_community = -empty-; bgp_community.add((65000,5678));
# if (65000,64501) ~ bgp_community then
2010-02-20 20:09:40 +00:00
# bgp_community.add((0, 1));
2009-03-14 13:01:39 +00:00
# if bgp_path ~ [= 65000 =] then
2000-05-08 22:33:50 +00:00
# bgp_path.prepend(65000);
# accept;
# }
# reject;
# };
#}
#
# Template usage example
#template bgp rr_client {
# disabled;
# local as 65000;
# multihop;
# rr client;
# rr cluster id 1.0.0.1;
#}
#
#protocol bgp rr_abcd from rr_client {
# neighbor 10.1.4.7 as 65000;
#}