Archives 2020 - Afenioux's Blog page

Triggers for iTerm2 (example for Arista EOS)

Written by Arnaud 30 november 2020 no comments

I wrote some triggers to get colors when using iTerm2 (screenshot below) with Arista EOS but it should also work on Cisco IOSes with some minor tuning.

iTerm2 is a replacement for Terminal and the successor to iTerm. It works on Macs with macOS 10.14 or newer. It allows you to create Triggers. Triggers watch for text matching a regular expression to arrive in a terminal session and then perform an action in response. You can't import triggers from a file/profile but you can configure them on "Preferences, Profile, Advanced, Edit Triggers".

The whole options are detailed in the official documentation for triggers.

pmacct and BGP communities (RTBH example)

Written by Arnaud 25 september 2020 no comments

I will show you an example to see traffic for routes that have some given BGP communities (for example blackholed traffic for RTBH), please read my previous blog post if you need to understand how to use pmacct/sfacct with influxDB and grafana.

Dropping RPKI/ROA invalid routes on Arista EOS

Written by Arnaud 10 september 2020 no comments

If needed, please read my previous blog post to configure your RPKI/ROA validators and sFlow visualisation with pmacct/influxDB/Grafana. It's always better to see what you are doing :)

I found several interesting documentation on the Arista website :
- Standalone BGP Origin Validation with RPKI : https://eos.arista.com/bgp-origin-validation-rpki/
- Securing Inter Domain Routing with RPKI : https://eos.arista.com/sidr-with-rpki/
- BGP Prefix Origin Validation with Resource Public Key Infrastructure (RPKI) : https://eos.arista.com/eos-4-24-0f/bgp-prefix-origin-validation-with-resource-public-key-infrastructure-rpki/

This page is a memo of the useful commands I used (and some tips) :

See traffic according to RPKI/ROA validation state with pmacct, influxdb and grafana

Written by Arnaud 14 august 2020 no comments

I will skip the explanations around RPKI/ROA and ROV (Route Origin Validation), I guess you already know the "basics"; if not, you should check this very well written "RPKI documentation" : https://rpki.readthedocs.io/en/latest/index.html
I also suggest to see this presentation "From Zero to RPKI Hero" to get explanations of how things works and how to setup your validator(s) and router's configuration : https://www.youtube.com/watch?v=7OBBz-IcEl4

We will now see the RPKI validators, PMACCT configuration, how to import pmacct data to influxDB and make some fancy graphs with grafana. As you will see below some traffic considered as "Invalid but Valid*" might need some investigations before dropping RPKI/ROA invalid routes as your may lose more traffic than expected if you are a transit provider.

Arista EOS : sync dir and files between supervisor cards

Written by Arnaud 17 april 2020 no comments

I know some files (like startup-config) are synchronized between supervisor cards on Arista chassis :

DCS-7508N(s1)#show redundancy file-replication 0 files unsynchronized, 5 files synchronized, 0 files failed, 5 files total.

File Status Last Synchronized ---------------------------- ------------------ -------------------- file:persist/secure Synchronized 45 days, 5:52:41 ago file:persist/sys Synchronized 0:04:05 ago flash:.assetTags Synchronized 45 days, 5:52:41 ago flash:startup-config Synchronized 0:38:59 ago flash:zerotouch-config Synchronized 45 days, 5:52:42 ago

But I could not find any way to synchronize my homemade scripts easily, so I wrote a script to do it :