add final outbound summary rule to spines

ngschmidt · Jan 1, 2021 · bac1931 · bac1931
1 parent ac66461
commit bac1931
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/roles/vars/vyos-s0.yml b/roles/vars/vyos-s0.yml
@@ -69,6 +69,12 @@ policy:
           action permit
           prefix 2610:100:6000:def::/128
       }
+      rule 40 {
+          action permit
+          ge 61
+          le 128
+          prefix 2610:100:6000:de0::/60
+      }
   prefix6in:
     name: 'INBOUND-SPINE6'
     description: "Accept inbound IPv6 spine routes"

diff --git a/roles/vars/vyos-s1.yml b/roles/vars/vyos-s1.yml
@@ -69,6 +69,12 @@ policy:
           action permit
           prefix 2610:100:6000:def::1/128
       }
+      rule 40 {
+          action permit
+          ge 61
+          le 128
+          prefix 2610:100:6000:de0::/60
+      }
   prefix6in:
     name: 'INBOUND-SPINE6'
     description: "Accept inbound IPv6 spine routes"