- Los participantes que lleguen vía fibra directa podrán conectarse directamente al switch PIT Paraguay en un puerto físico. Las velocidades de puerto admitidas actualmente son 1G y 10GE.
- Los participantes que deseen llegar mediante transporte deberán solicitarnos una VLAN, por lo que les facilitaremos la VLAN que configurará su transporte.
Las solicitudes y activaciones se atenderán vía correo electrónico, siguiendo el siguiente formulario de ejemplo. Recuerda proporcionar los datos de tu empresa.
El correo electrónico de solicitud es: peering@pit.net.py
Asunto: Solicitud de peering: AS XXXXX
Formulario de solicitud de peering de PIT Paraguay:
- Empresa:
- ASN:
- Enlace de PeeringDB:
- Lugar de interconexión física:
- Velocidad del puerto:
- Contacto NOC:
Nota sobre pruebas de cuarentena:
Los miembros pueden tener que pasar una prueba de cuarentena para verificar que su red y los protocolos estén configurados correctamente. Este procedimiento es rápido y no debería tomar más de unos pocos minutos. No se necesita ninguna otra acción para migrar al entorno de producción una vez que la prueba de cuarentena sea aprobada. Todo se realiza del lado de PIT Paraguay.
Configuración de Ejemplo - Huawei VRP
Adjuntamos un ejemplo de configuración utilizando Huawei NE8000:
## VLAN ##
interface Eth-Trunk1.XXXX
vlan-type dot1q XXXX
description IX - PIT-PY
ipv6 enable
ip address 100.125.192.XXX 255.255.255.0
ipv6 address 2001:DB8:595::XXXX/64
statistic enable
arp rate-limit 0
#
## Filters ##
xpl route-filter PITPY-V4-IN
if (ip route-destination in BOGONS-IPV4) then
refuse
endif
if (ip route-destination in {0.0.0.0 0 le 24}) then
finish
endif
end-filter
#
xpl route-filter PITPY-V4-OUT
if (ip route-destination in EXPORT-PITPY-V4) then
apply large-community DENY_PITPY_OUT additive
finish
endif
end-filter
#
xpl route-filter PITPY-V6-IN
if (ipv6 route-destination in BOGONS-IPV6) then
refuse
endif
if (ipv6 route-destination in {:: 0 le 48}) then
finish
endif
end-filter
#
xpl route-filter PITPY-V6-OUT
if (ipv6 route-destination in EXPORT-PITPY-V6) then
apply large-community DENY_PITPY_OUT additive
finish
endif
end-filter
#
xpl large-community-list DENY_PITPY_OUT
64595:0:65540,
64595:0:64539,
64595:0:64555
end-list
#
xpl ip-prefix-list BOGONS-IPV4
0.0.0.0 0 eq 0,
0.0.0.0 8 le 32,
10.0.0.0 8 le 32,
100.64.0.0 10 le 32,
127.0.0.0 8 le 32,
169.254.0.0 16 le 32,
172.16.0.0 12 le 32,
192.0.0.0 24 le 32,
192.0.2.0 24 le 32,
192.168.0.0 16 le 32,
198.18.0.0 15 le 32,
198.51.100.0 24 le 32,
203.0.113.0 24 le 32,
224.0.0.0 3 le 32
end-list
#
xpl ip-prefix-list EXPORT-PITPY-V4
198.18.0.0 22,
198.18.0.0 23,
198.18.0.0 24,
198.18.1.0 24,
198.18.2.0 23,
198.18.2.0 24,
198.18.3.0 24
end-list
#
xpl ipv6-prefix-list BOGONS-IPV6
:: 8 le 128,
100:: 64 le 128,
2001:2:: 48 le 128,
2001:10:: 28 le 128,
2001:db8:: 32 le 128,
2002:: 16 le 128,
3ffe:: 16 le 128,
fc00:: 7 le 128,
fe80:: 10 le 128,
fec0:: 10 le 128,
ff00:: 8 le 128
end-list
#
xpl ipv6-prefix-list EXPORT-PITPY-V6
2803:DB8:: 32,
2803:DB8:: 33,
2803:DB8:8000:: 33
end-list
#
### Peers ###
peer 100.125.192.253 as-number 64595
peer 100.125.192.253 description pit-py.peer1-IPv4
peer 100.125.192.253 password simple *MD5KEY*
ipv4-family unicast
peer 100.125.192.253 enable
peer 100.125.192.253 public-as-only
peer 100.125.192.253 route-filter PITPY-V4-IN import
peer 100.125.192.253 route-filter PITPY-V4-OUT export
peer 100.125.192.253 advertise-community
peer 100.125.192.253 advertise-large-community
peer 100.125.192.253 advertise-ext-community
peer 100.125.192.254 as-number 64595
peer 100.125.192.254 description pit-py.peer2-IPv4
peer 100.125.192.254 password simple *MD5KEY*
ipv4-family unicast
peer 100.125.192.254 enable
peer 100.125.192.254 public-as-only
peer 100.125.192.254 route-filter PITPY-V4-IN import
peer 100.125.192.254 route-filter PITPY-V4-OUT export
peer 100.125.192.254 advertise-community
peer 100.125.192.254 advertise-large-community
peer 100.125.192.254 advertise-ext-community
peer 2001:DB8:595::253 as-number 64595
peer 2001:DB8:595::253 description pit-py.peer1-IPv6
peer 2001:DB8:595::253 password simple *MD5KEY*
ipv6-family unicast
peer 2001:DB8:595::253 enable
peer 2001:DB8:595::253 public-as-only
peer 2001:DB8:595::253 route-filter PITPY-V6-IN import
peer 2001:DB8:595::253 route-filter PITPY-V6-OUT export
peer 2001:DB8:595::253 advertise-community
peer 2001:DB8:595::253 advertise-large-community
peer 2001:DB8:595::253 advertise-ext-community
peer 2001:DB8:595::254 as-number 64595
peer 2001:DB8:595::254 description pit-py.peer2-IPv6
peer 2001:DB8:595::254 password simple *MD5KEY*
ipv6-family unicast
peer 2001:DB8:595::254 enable
peer 2001:DB8:595::254 public-as-only
peer 2001:DB8:595::254 route-filter PITPY-V6-IN import
peer 2001:DB8:595::254 route-filter PITPY-V6-OUT export
peer 2001:DB8:595::254 advertise-community
peer 2001:DB8:595::254 advertise-large-community
peer 2001:DB8:595::254 advertise-ext-community
Configuración de Ejemplo - Mikrotik RouterOS
Adjuntamos un ejemplo de configuración utilizando Mikrotik RouterOS:
# VLAN Creation
/interface vlan add interface=sfp-sfpplus1 name=vlanXXXX-pit-paraguay vlan-id=XXXX
# MNDP Disable
/interface list add name=do-not-discover
/interface list member add interface=vlanXXXX-pit-paraguay list=do-not-discover
/ip neighbor discovery-settings set discover-interface-list=!do-not-discover
# IP Addresses
/ip address add address=100.125.192.XXX/24 interface=vlanXXXX-pit-paraguay network=100.125.192.0
/ipv6 address add address=2001:db8:595::XXXX advertise=no interface=vlanXXXX-pit-paraguay
# IPv4 Filters
/routing filter add action=discard chain=PITPY-V4-IN prefix=0.0.0.0/8
/routing filter add action=discard chain=PITPY-V4-IN prefix=10.0.0.0/8
/routing filter add action=discard chain=PITPY-V4-IN prefix=127.0.0.0/8
/routing filter add action=discard chain=PITPY-V4-IN prefix=169.254.0.0/16
/routing filter add action=discard chain=PITPY-V4-IN prefix=172.16.0.0/12
/routing filter add action=discard chain=PITPY-V4-IN prefix=192.0.0.0/24
/routing filter add action=discard chain=PITPY-V4-IN prefix=192.0.2.0/24
/routing filter add action=discard chain=PITPY-V4-IN prefix=192.88.99.0/24
/routing filter add action=discard chain=PITPY-V4-IN prefix=192.168.0.0/16
/routing filter add action=discard chain=PITPY-V4-IN prefix=198.18.0.0/15
/routing filter add action=discard chain=PITPY-V4-IN prefix=198.51.100.0/24
/routing filter add action=discard chain=PITPY-V4-IN prefix=203.0.113.0/24
/routing filter add action=discard chain=PITPY-V4-IN prefix=224.0.0.0/4
/routing filter add action=discard chain=PITPY-V4-IN prefix=240.0.0.0/4
/routing filter add action=discard chain=PITPY-V4-IN prefix=255.255.255.255/32
/routing filter add action=accept chain=PITPY-V4-IN
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.0.0/22
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.0.0/23
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.0.0/24
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.1.0/24
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.2.0/23
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.2.0/24
/routing filter add action=accept chain=PITPY-V4-OUT prefix=198.18.3.0/24
/routing filter add action=discard chain=PITPY-V4-OUT
# IPv6 Filters
/routing filter add action=discard chain=PITPY-V6-IN prefix=::1/128
/routing filter add action=discard chain=PITPY-V6-IN prefix=::/128
/routing filter add action=discard chain=PITPY-V6-IN prefix=::/8
/routing filter add action=discard chain=PITPY-V6-IN prefix=100::/64
/routing filter add action=discard chain=PITPY-V6-IN prefix=2001:db8::/32
/routing filter add action=discard chain=PITPY-V6-IN prefix=2001:db8::/48
/routing filter add action=discard chain=PITPY-V6-IN prefix=2001:2::/48
/routing filter add action=discard chain=PITPY-V6-IN prefix=2001:10::/28
/routing filter add action=discard chain=PITPY-V6-IN prefix=3ffe::/16
/routing filter add action=discard chain=PITPY-V6-IN prefix=fc00::/7
/routing filter add action=accept chain=PITPY-V6-IN
/routing filter add action=accept chain=PITPY-V6-OUT prefix=2001:db8::/32
/routing filter add action=discard chain=PITPY-V6-OUT
# BGP Peers
/routing bgp peer add in-filter=PITPY-V4-IN name=pit-py.peer1-IPv4 out-filter=PITPY-V4-OUT remote-address=100.125.192.253 remote-as=64595 tcp-md5-key=*MD5KEY* ttl=default update-source=100.125.192.XXX
/routing bgp peer add address-families=ipv6 in-filter=PITPY-V6-IN name=pit-py.peer1-IPv6 out-filter=PITPY-V6-OUT remote-address=2001:db8:595::253 remote-as=64595 tcp-md5-key=*MD5KEY* ttl=default update-source=2001:db8:595::XXXX
/routing bgp peer add in-filter=PITPY-V4-IN name=pit-py.peer2-IPv4 out-filter=PITPY-V4-OUT remote-address=100.125.192.254 remote-as=64595 tcp-md5-key=*MD5KEY* ttl=default update-source=100.125.192.XXX
/routing bgp peer add address-families=ipv6 in-filter=PITPY-V6-IN name=pit-py.peer2-IPv6 out-filter=PITPY-V6-OUT remote-address=2001:db8:595::254 remote-as=64595 tcp-md5-key=*MD5KEY* ttl=default update-source=2001:db8:595::XXXX