Всем привет! Я пытаюсь настроить BGP с VRF, но он использует неправильный исходный IP для установления BGP-сессии, хотя в конфигурации BGP явно указан SOURCE IP. Как видите, он следует настройкам шлюза по умолчанию, а не адресации VRF.
Mikrotik
[admin@MikroTik] /routing/bgp/connection> /ip/dhcp-client/print
Колонки: INTERFACE, USE-PEER-DNS, ADD-DEFAULT-ROUTE, STATUS, ADDRESS
# INTERFACE USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS ADDRESS
0 ether1 yes yes bound 10.41.100.154/24
[admin@MikroTik] /routing/bgp/connection>
Конфигурация BGP
[admin@MikroTik] /routing/bgp/connection> print detail
Флаги: D - динамический, X - отключён, I - неактивен
0 name="overlay-192.0.2.2"
remote.address=192.0.2.2 .as=65530
local.address=192.0.2.1 .role=ebgp
connect=yes listen=yes routing-table=OVERLAY vrf=OVERLAY router-id=192.0.2.1 templates=overlay as=65366 nexthop-choice=force-self multihop=yes address-families=ip
output.default-originate=always
[admin@MikroTik] /routing/bgp/connection> /routing/bgp/template/print
Флаги: * - по умолчанию; X - отключён, I - неактивен
0 * name="default" routing-table=main as=65530
1 name="overlay" routing-table=OVERLAY vrf=OVERLAY router-id=OVERLAY as=65366 nexthop-choice=force-self multihop=yes address-families=ip
output.default-originate=always
Отслеживание соединений
[admin@MikroTik] /routing/bgp/connection> /ip/firewall/connection/print
Флаги: S - SEEN-REPLY; A - ASSURED; C - CONFIRMED
Колонки: PROTOCOL, SRC-ADDRESS, DST-ADDRESS, TCP-STATE, TIMEOUT, ORIG-RATE, REPL-RATE, ORIG-PACKETS, REPL-PACKETS, ORIG-BYTES, REPL-BYTES
# PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT ORIG-RATE REPL-RATE ORIG-PACKETS REPL-PACKETS ORIG-BYTES REPL-BYTES
0 SAC tcp 10.41.100.153:40512 10.41.100.154:22 established 1d 4.9kbps 6.2kbps 1847 1149 143180 251608
1 C tcp 10.41.100.154:50844 192.0.2.2:179 syn-sent 3s 480bps 0bps 3 0 180 0
2 SAC tcp 10.41.100.153:36344 10.41.100.154:80 established 23h59m49s 0bps 0bps 96 95 5873 5319
3 C tcp 10.41.100.154:57098 192.0.2.3:179 syn-sent 3s 480bps 0bps 3 0 180 0
[admin@MikroTik] /routing/bgp/connection>
Mikrotik
[admin@MikroTik] /routing/bgp/connection> /ip/dhcp-client/print
Колонки: INTERFACE, USE-PEER-DNS, ADD-DEFAULT-ROUTE, STATUS, ADDRESS
# INTERFACE USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS ADDRESS
0 ether1 yes yes bound 10.41.100.154/24
[admin@MikroTik] /routing/bgp/connection>
Конфигурация BGP
[admin@MikroTik] /routing/bgp/connection> print detail
Флаги: D - динамический, X - отключён, I - неактивен
0 name="overlay-192.0.2.2"
remote.address=192.0.2.2 .as=65530
local.address=192.0.2.1 .role=ebgp
connect=yes listen=yes routing-table=OVERLAY vrf=OVERLAY router-id=192.0.2.1 templates=overlay as=65366 nexthop-choice=force-self multihop=yes address-families=ip
output.default-originate=always
[admin@MikroTik] /routing/bgp/connection> /routing/bgp/template/print
Флаги: * - по умолчанию; X - отключён, I - неактивен
0 * name="default" routing-table=main as=65530
1 name="overlay" routing-table=OVERLAY vrf=OVERLAY router-id=OVERLAY as=65366 nexthop-choice=force-self multihop=yes address-families=ip
output.default-originate=always
Отслеживание соединений
[admin@MikroTik] /routing/bgp/connection> /ip/firewall/connection/print
Флаги: S - SEEN-REPLY; A - ASSURED; C - CONFIRMED
Колонки: PROTOCOL, SRC-ADDRESS, DST-ADDRESS, TCP-STATE, TIMEOUT, ORIG-RATE, REPL-RATE, ORIG-PACKETS, REPL-PACKETS, ORIG-BYTES, REPL-BYTES
# PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT ORIG-RATE REPL-RATE ORIG-PACKETS REPL-PACKETS ORIG-BYTES REPL-BYTES
0 SAC tcp 10.41.100.153:40512 10.41.100.154:22 established 1d 4.9kbps 6.2kbps 1847 1149 143180 251608
1 C tcp 10.41.100.154:50844 192.0.2.2:179 syn-sent 3s 480bps 0bps 3 0 180 0
2 SAC tcp 10.41.100.153:36344 10.41.100.154:80 established 23h59m49s 0bps 0bps 96 95 5873 5319
3 C tcp 10.41.100.154:57098 192.0.2.3:179 syn-sent 3s 480bps 0bps 3 0 180 0
[admin@MikroTik] /routing/bgp/connection>
