Skip to main content

Dynamic Routes (BGP)

In this deployment example, we will configure the Anapaya EDGE to dynamically advertise routes that are reachable.

IP prefixes that are learned from the SCION network are advertised to the LAN via BGP, conversely, IP prefixes that are reachable in the LAN need to be advertised to the EDGE appliances via BGP as well. When an IP prefix is no longer reachable via the SCION network, it is retracted from BGP and the LAN will no longer use that EDGE appliance to reach the SCION network.

note

Refer to the Getting Started Setup guide for step-by-step instructions on how to interact with the Anapaya appliance.

Information

The configuration examples below are based on the single EDGE setup and need to be adapted to your specific setup.

Anapaya EDGE
Anapaya EDGE
SCION ISP
SCION ISP
Firewall or Router
Firewall or Router
SCION Link
SCION Link
ISPISD-AS
1-ff00:0:1
ISP ISD-AS...
CustomerISD-AS
1-ff00:0:10
Customer ISD-AS...
SCION Interface ID
SCION Interface ID
IP Connectivity
IP Connectivity
EDGE WAN IP
169.254.2.2/30
EDGE WAN IP...
CORE IP
169.254.2.1/30
CORE IP...
EDGE LAN IP
10.10.0.12/24
EDGE LAN IP...
10.10.0.1/24
10.10.0.1/24
21
21
1
1
x
x
ASN 65012
ASN 65012
ASN 65001
ASN 65001
BGP Session
BGP Session
Text is not SVG - cannot display

Additional information provided by the customer

BGP RouterRouter IPASN
EDGE appliance10.10.0.1265012
LAN side10.10.0.165001

BGP

The following BGP section is added to configure the eBGP session between the EDGE appliance and a BGP router in the internal network.

Loading...

IP-in-SCION tunneling

The IP-in-SCION tunneling section needs to be adjusted. The static_announcements list is no longer required. Instead, the EDGE appliance propagates the IP prefixes that are received via BGP from the LAN side router to the SCION network. The rest of the IP-in-SCION tunneling configuration remains the same as in the single EDGE setup example.

Loading...

Complete configuration

For completeness, we provide the full configuration of the EDGE appliance:

Loading...