111 lines
3.1 KiB
YAML
111 lines
3.1 KiB
YAML
---
|
|
- name: Configure IPv4 routes
|
|
community.routeros.api_modify:
|
|
path: ip route
|
|
data:
|
|
- comment: Tailnet
|
|
disabled: false
|
|
distance: 1
|
|
dst-address: 100.64.0.0/10
|
|
gateway: 172.17.0.2
|
|
routing-table: main
|
|
scope: 30
|
|
suppress-hw-offload: false
|
|
target-scope: 10
|
|
- disabled: false
|
|
distance: 1
|
|
dst-address: 0.0.0.0/0
|
|
gateway: pppoe-gpon
|
|
routing-table: main
|
|
scope: 30
|
|
suppress-hw-offload: false
|
|
target-scope: 10
|
|
vrf-interface: pppoe-gpon
|
|
handle_absent_entries: remove
|
|
handle_entries_content: remove_as_much_as_possible
|
|
|
|
- name: Configure IPv6 routes
|
|
community.routeros.api_modify:
|
|
path: ipv6 route
|
|
data:
|
|
- disabled: false
|
|
distance: 1
|
|
dst-address: 2000::/3
|
|
gateway: 2001:470:70:dd::1
|
|
scope: 30
|
|
target-scope: 10
|
|
- comment: Tailnet
|
|
disabled: false
|
|
dst-address: fd7a:115c:a1e0::/48
|
|
gateway: 2001:470:61a3:500::1
|
|
pref-src: ""
|
|
routing-table: main
|
|
suppress-hw-offload: false
|
|
handle_absent_entries: remove
|
|
handle_entries_content: remove_as_much_as_possible
|
|
|
|
- name: Configure BGP instance
|
|
community.routeros.api_modify:
|
|
path: routing bgp instance
|
|
data:
|
|
- name: bgp-homelab
|
|
as: 65000
|
|
disabled: false
|
|
router-id: 192.168.1.1
|
|
routing-table: main
|
|
handle_absent_entries: remove
|
|
handle_entries_content: remove_as_much_as_possible
|
|
|
|
- name: Configure BGP templates
|
|
community.routeros.api_modify:
|
|
path: routing bgp template
|
|
data:
|
|
- name: klaster
|
|
afi: ip,ipv6
|
|
as: 6500
|
|
disabled: false
|
|
# Default template
|
|
- name: default
|
|
handle_absent_entries: remove
|
|
handle_entries_content: remove_as_much_as_possible
|
|
|
|
- name: Configure BGP connections
|
|
community.routeros.api_modify:
|
|
path: routing bgp connection
|
|
data:
|
|
- name: bgp1
|
|
afi: ip,ipv6
|
|
as: 65000
|
|
connect: true
|
|
disabled: false
|
|
instance: bgp-homelab
|
|
listen: true
|
|
local.role: ibgp
|
|
remote.address: 2001:470:61a3:100::3/128
|
|
routing-table: main
|
|
templates: klaster
|
|
- name: dlink-lte
|
|
afi: ip,ipv6
|
|
as: 65000
|
|
connect: true
|
|
disabled: false
|
|
instance: bgp-homelab
|
|
listen: true
|
|
# ibgp-rr: CRS acts as route reflector for D-Link (the RR client).
|
|
# This allows k8s routes learned from bgp1 to be reflected to D-Link
|
|
# without violating iBGP split-horizon.
|
|
local.role: ibgp-rr
|
|
remote.address: 192.168.6.2/32
|
|
routing-table: main
|
|
templates: klaster
|
|
hold-time: 30s
|
|
keepalive-time: 10s
|
|
# Redistribute connected (VLAN addresses) and static routes (Tailscale,
|
|
# GPON default) so D-Link has explicit routes to all internal subnets
|
|
# and a default route when GPON is up.
|
|
output.redistribute: connected,static
|
|
output.default-originate: if-installed
|
|
nexthop-choice: force-self
|
|
handle_absent_entries: remove
|
|
handle_entries_content: remove_as_much_as_possible
|