31
edits
Changes
no edit summary
Navigate to <b>Network -> Routing -> Dynamic routes -> BGP</b>.
Navigate to <b>Network -> Routing -> Dynamic routes -> BGP</b>.
Enable <b>"BGP - Global Settings"</b> and <b>"vty"</b>.
Enable <b>"BGP - Global Settings"</b> and <b>"vty"</b>.
[[File:BGP enable.png|none|border|left|class=tlt-border]]
[[File:BGP enable.png|none|border|left|class=tlt-border|800x800px]]
On <b>BGP Instance</b> tab configure it like this:
On <b>BGP Instance</b> tab configure it like this:
[[File:BGP routing instance.png|none|border|left|class=tlt-border]]
[[File:BGP routing instance.png|none|border|left|class=tlt-border|800x800px]]
 1. <b>Enable</b> - on
 1. <b>Enable</b> - on
On popped up window select these options:
On popped up window select these options:
[[File:BGP peer config v1.png|none|border|left|class=tlt-border]]
[[File:BGP peer config v1.png|none|border|left|class=tlt-border|800x800px]]
 1. <b>Enable</b> - on
 1. <b>Enable</b> - on
 3. <b>Remote address</b> - 10.10.10.20 (RUT2 WAN IP)
 3. <b>Remote address</b> - 10.10.10.20 (RUT2 WAN IP)
==RUT2 BGP Configuration==
==RUT2 BGP Configuration==
For RUT2 configuration is very similar all we need to do is just change <b>BGP router ID</b> to <b>10.10.10.20</b>, <b>Network</b> to <b>192.168.2.0/24</b> on <b>BGP Instance</b> and <b>Remote address</b> to <b>10.10.10.10</b> on <b>Peer Configuration</b>.
For RUT2, the configuration is very similar, all we need to do is just change the <b>BGP router ID</b> to <b>10.10.10.20</b>, <b>Network</b> to <b>192.168.2.0/24</b> on the <b>BGP Instance</b>, and the <b>Remote address</b> to <b>10.10.10.10</b> on the <b>Peer Configuration</b>.
<b>BGP Instance</b> should look like this:
<b>BGP Instance</b> should look like this:
[[File:BGP instance RUT2.png|none|border|left|class=tlt-border]]
[[File:BGP instance RUT2.png|none|border|left|class=tlt-border|900x900px]]
And <b>Peer Configuration</b> like this:
And <b>Peer Configuration</b> like this:
[[File:RUT2 BGP peer.png|none|border|left|class=tlt-border]]
[[File:RUT2 BGP peer.png|none|border|left|class=tlt-border|900x900px]]
==Firewall Zones==
==Firewall Zones==
Now we can reach only routers by them self to reach their whole network we need to edit Firewalls <b>WAN</b> Zone to add <b>lan</b> on <b>forward to destination zones</b> field.
Now we can reach only routers by them self to reach their whole network we need to edit Firewalls <b>WAN</b> Zone to add <b>lan</b> on <b>forward to destination zones</b> field.
On both routers navgate to <b>Network -> Firewall -> General Settings -> Zones</b> and press edit on <b>wan</b> zone.
On both routers navigate to <b>Network -> Firewall -> General Settings -> Zones</b> and press edit on <b>wan</b> zone.
[[File:BGP Firewall edit.png|none|border|left|class=tlt-border|1100x1100px]]
[[File:BGP Firewall edit.png|none|border|left|class=tlt-border|1100x1100px]]
On popped up window add <b>lan</b> on <b>Allow forward to destination zones</b> field.
On popped up window add <b>lan</b> on <b>Allow forward to destination zones</b> field and press
[[File:BGP Firewall WAN zone .png|none|border|left|class=tlt-border]]
[[File:BGP Firewall WAN zone .png|none|border|left|class=tlt-border|900x900px]]
=Testing the setup=
=Testing the setup=
If you have followed the steps correctly, configuration should be complete. Here are the results you can expect to receive:
If you have followed the steps correctly, the configuration should be complete. Here are the results you can expect to receive:
PC1 to PC2:
PC1 to PC2:
=See also=
=See also=
<ul>
<ul>
<li>[[Routing]]</li>
<li>[[Routing]]</li>
<li>[[Firewall traffic rules]]</li>
</ul>
</ul>
=External links=
=External links=
https://frrouting.org/ - additional information about FRRouting that our device routing is based on.
https://frrouting.org/ - additional information about FRRouting that our device routing is based on.