Sample Header Ad - 728x90

How to configure bird 1.6 router to reject local LAN traffic?

0 votes
0 answers
100 views
I am setting up CI environment where I have two subnets connected by two peered bird routers. My current ipv4 config on one of the routers is as follows:
protocol device {
}

protocol direct {
  interface "eth0";
  interface "eth1";
}

protocol kernel {
  import none;
  export all;
}

protocol bgp {
  import all;
  export all;

  local    10.100.0.9 as 9;
  neighbor 10.100.0.7 as 7;
}
This and the other router are connected over 10.100.0.0/24. LAN instances connect to this router over 10.9.0.0/24. Currently, when I send LAN ethernet packets from e.g. 10.9.0.71 to 10.9.0.72, and the ethernet dst is router's MAC then the packet is delivered to LAN server. What I would like to achieve for LAN packets is: * when dst MAC is router's MAC then the packet does not reach the destination, * when dst MAC is destination server's MAC then the packet reaches that destination, just as it does now. I don't know very much about routing and bird documentation is rather targeted to experienced users. So far I tried using filters and blackholed static routes, but it was more of a guesswork and none of it worked.
Asked by Boycott OpenAI sellouts (101 rep)
May 5, 2023, 02:59 PM