Afenioux's Blog page

3am; darkness; Maintenance window closing. Safety net: rollback.

Triggers for iTerm2 (example for Arista EOS)

Written by Arnaud no comments

I wrote some triggers to get colors when using iTerm2 (screenshot below) with Arista EOS but it should also work on Cisco IOSes with some minor tuning.

iTerm2 is a replacement for Terminal and the successor to iTerm. It works on Macs with macOS 10.14 or newer. It allows you to create Triggers. Triggers watch for text matching a regular expression to arrive in a terminal session and then perform an action in response. You can import triggers from a file/profile but you can configure them on "Preferences, Profile, Advanced, Edit Triggers".

The whole options are detailed in the official documentation for triggers.

Read more Triggers for iTerm2 (example for Arista EOS)

Classified in : Arista Tags : none

Dropping RPKI/ROA invalid routes on Arista EOS

Written by Arnaud no comments

If needed, please read my previous blog post to configure your RPKI/ROA validators and sFlow visualisation with pmacct/influxDB/Grafana. It's always better to see what you are doing :)

I found several interesting documentation on the Arista website :
- Standalone BGP Origin Validation with RPKI : https://eos.arista.com/bgp-origin-validation-rpki/
- Securing Inter Domain Routing with RPKI : https://eos.arista.com/sidr-with-rpki/
- BGP Prefix Origin Validation with Resource Public Key Infrastructure (RPKI) : https://eos.arista.com/eos-4-24-0f/bgp-prefix-origin-validation-with-resource-public-key-infrastructure-rpki/

This page is a memo of the useful commands I used (and some tips) :

Read more Dropping RPKI/ROA invalid routes on Arista EOS

See traffic according to RPKI/ROA validation state with pmacct, influxdb and grafana

Written by Arnaud no comments

I will skip the explanations around RPKI/ROA and ROV (Route Origin Validation), I guess you already know the "basics"; if not, you should check this very well written "RPKI documentation" : https://rpki.readthedocs.io/en/latest/index.html
I also suggest to see this presentation "From Zero to RPKI Hero" to get explanations of how things works and how to setup your validator(s) and router's configuration : https://www.youtube.com/watch?v=7OBBz-IcEl4

We will now see the RPKI validators, PMACCT configuration, how to import pmacct data to influxDB and make some fancy graphs with grafana. As you will see below some traffic considered as "Invalid but Valid*" might need some investigations before dropping RPKI/ROA invalid routes as your may lose more traffic than expected if you are a transit provider.

Read more See traffic according to RPKI/ROA validation state with pmacct, influxdb and grafana

Classified in : Uncategorized Tags : none

Arista EOS : sync dir and files between supervisor cards

Written by Arnaud no comments

I know some files (like startup-config) are synchronized between supervisor cards on Arista chassis :

DCS-7508N(s1)#show redundancy file-replication
0 files unsynchronized, 5 files synchronized, 0 files failed, 5 files total.

File                         Status             Last Synchronized
---------------------------- ------------------ --------------------
file:persist/secure          Synchronized       45 days, 5:52:41 ago
file:persist/sys             Synchronized       0:04:05 ago
flash:.assetTags             Synchronized       45 days, 5:52:41 ago
flash:startup-config         Synchronized       0:38:59 ago
flash:zerotouch-config       Synchronized       45 days, 5:52:42 ago

But I could not find any way to synchronize my homemade scripts easily, so I wrote a script to do it :

Read more Arista EOS : sync dir and files between supervisor cards

Classified in : Arista Tags : none
Rss feed of the articles