From e2728c8078161d9811d6c24a11e4c95efd1c9313 Mon Sep 17 00:00:00 2001 From: Job Snijders Date: Thu, 22 Feb 2024 14:58:29 +0100 Subject: RPKI: Add 'local address' configuration option Allow to explicitly configure the source IP address for RPKI-To-Router sessions. Predictable source addresses are useful for minimizing the holes to be poked in ACLs. Changed from 'source address' to 'local address' by committer. --- doc/bird.sgml | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'doc/bird.sgml') diff --git a/doc/bird.sgml b/doc/bird.sgml index 76ca7f75..aeecb1dc 100644 --- a/doc/bird.sgml +++ b/doc/bird.sgml @@ -5697,6 +5697,7 @@ protocol rpki [<name>] { roa6 { table <tab>; }; remote <ip> | "<domain>" [port <num>]; port <num>; + local address <ip>; refresh [keep] <num>; retry [keep] <num>; expire [keep] <num>; @@ -5726,6 +5727,9 @@ specify both channels. number is 323 for transport without any encryption and 22 for transport with SSH encryption. + local address + Define local address we should use as a source address for the RTR session. + refresh [keep] Time period in seconds. Tells how long to wait before next attempting to poll the cache using a Serial Query or a Reset Query packet. Must be lower than 86400 seconds (one -- cgit v1.2.3