| 接口 | ip tunnel add vti0 mode vti |
|---|---|
| 关键参数 | key 与 IPsec 策略 mark 对应 |
| BGP | FRR 在 vti0 上建 neighbor |
| 核对 | ip -s xfrm state 与 show ip bgp |
Linux + FRR
Linux + FRR
ip tunnel add vti0 mode vti local 198.51.100.1 remote 203.0.113.2 key 42
ip addr add 169.254.100.1/30 dev vti0
ip link set vti0 up
sysctl -w net.ipv4.conf.vti0.disable_policy=1
vtysh -c 'conf t' -c 'router bgp 65001' -c 'neighbor 169.254.100.2 remote-as 65002' -c 'end'
!
ip -s xfrm state
vtysh -c 'show ip bgp summary'