Browse Source

add an example neighbor with manual keyed IPsec

OPENBSD_3_6
henning 20 years ago
parent
commit
c0a72d2560
1 changed files with 10 additions and 1 deletions
  1. +10
    -1
      src/etc/bgpd.conf

+ 10
- 1
src/etc/bgpd.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: bgpd.conf,v 1.5 2004/05/08 18:43:06 henning Exp $
# $OpenBSD: bgpd.conf,v 1.6 2004/05/08 21:04:47 henning Exp $
# sample bgpd configuration file
# see bgpd.conf(5)
@ -65,6 +65,15 @@ neighbor 10.0.0.0/24 {
descr "template for local peers"
}
neighbor 10.2.1.1 {
remote-as 65023
local-address 10.0.0.8
ipsec esp in spi 10 sha1 0a4f1d1f1a1c4f3c9e2f6f0f2a8e9c8c5a1b0b3b \
aes 0c1b3a6c7d7a8d2e0e7b4f3d5e8e6c1e
ipsec esp out spi 12 sha1 0e9c8f6a8e2c7d3a0b5d0d0f0a3c5c1d2b8e0f8b \
aes 4e0f2f1b5c4e3c0d0e2f2d3b8c5c8f0b
}
# filter out prefixes longer than 24 or shorter than 8 bits
deny from any
allow from any prefixlen 8 - 24


Loading…
Cancel
Save