From c0a72d2560afe7bee19f3765f074cd6c57c803d1 Mon Sep 17 00:00:00 2001 From: henning <> Date: Sat, 8 May 2004 21:04:47 +0000 Subject: [PATCH] add an example neighbor with manual keyed IPsec --- src/etc/bgpd.conf | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/src/etc/bgpd.conf b/src/etc/bgpd.conf index 18580dc7..6a38153d 100644 --- a/src/etc/bgpd.conf +++ b/src/etc/bgpd.conf @@ -1,4 +1,4 @@ -# $OpenBSD: bgpd.conf,v 1.5 2004/05/08 18:43:06 henning Exp $ +# $OpenBSD: bgpd.conf,v 1.6 2004/05/08 21:04:47 henning Exp $ # sample bgpd configuration file # see bgpd.conf(5) @@ -65,6 +65,15 @@ neighbor 10.0.0.0/24 { descr "template for local peers" } +neighbor 10.2.1.1 { + remote-as 65023 + local-address 10.0.0.8 + ipsec esp in spi 10 sha1 0a4f1d1f1a1c4f3c9e2f6f0f2a8e9c8c5a1b0b3b \ + aes 0c1b3a6c7d7a8d2e0e7b4f3d5e8e6c1e + ipsec esp out spi 12 sha1 0e9c8f6a8e2c7d3a0b5d0d0f0a3c5c1d2b8e0f8b \ + aes 4e0f2f1b5c4e3c0d0e2f2d3b8c5c8f0b +} + # filter out prefixes longer than 24 or shorter than 8 bits deny from any allow from any prefixlen 8 - 24