# vyos-workbench1.vmhost-1.tsukuba-1.watakushi.yusuke.pub

set policy prefix-list6 as213164-ipv6-zatsu rule 1 action 'permit'
set policy prefix-list6 as213164-ipv6-zatsu rule 1 description 'IP prefix for containers in vyos-workbench1.vmhost-1.tsukuba-1.watakushi.yusuke.pub'
set policy prefix-list6 as213164-ipv6-zatsu rule 1 prefix '2a10:2f00:18a:8803:3088::/80'

set policy prefix-list6 ipv6-bogon-prefixes description 'bogon prefixes from https://www.janog.gr.jp/doc/janog-comment/jc1006.txt'
set policy prefix-list6 ipv6-bogon-prefixes rule 1 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 1 description 'default'
set policy prefix-list6 ipv6-bogon-prefixes rule 1 prefix '::/0'
set policy prefix-list6 ipv6-bogon-prefixes rule 2 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 2 description 'reserved (formerly IPv4-compatible IPv6 address)'
set policy prefix-list6 ipv6-bogon-prefixes rule 2 ge '96'
set policy prefix-list6 ipv6-bogon-prefixes rule 2 prefix '::/96'
set policy prefix-list6 ipv6-bogon-prefixes rule 3 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 3 description 'unspecified address'
set policy prefix-list6 ipv6-bogon-prefixes rule 3 prefix '::/128'
set policy prefix-list6 ipv6-bogon-prefixes rule 4 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 4 description 'loopback address'
set policy prefix-list6 ipv6-bogon-prefixes rule 4 prefix '::1/128'
set policy prefix-list6 ipv6-bogon-prefixes rule 5 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 5 description 'IPv4-mapped address'
set policy prefix-list6 ipv6-bogon-prefixes rule 5 ge '96'
set policy prefix-list6 ipv6-bogon-prefixes rule 5 prefix '::ffff:0:0/96'
set policy prefix-list6 ipv6-bogon-prefixes rule 6 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 6 description 'discard-only address'
set policy prefix-list6 ipv6-bogon-prefixes rule 6 ge '64'
set policy prefix-list6 ipv6-bogon-prefixes rule 6 prefix '100::/64'
set policy prefix-list6 ipv6-bogon-prefixes rule 7 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 7 description 'benchmarking address'
set policy prefix-list6 ipv6-bogon-prefixes rule 7 ge '48'
set policy prefix-list6 ipv6-bogon-prefixes rule 7 prefix '2001:2::/48'
set policy prefix-list6 ipv6-bogon-prefixes rule 8 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 8 description 'address for documentations'
set policy prefix-list6 ipv6-bogon-prefixes rule 8 ge '32'
set policy prefix-list6 ipv6-bogon-prefixes rule 8 prefix '2001:db8::/32'
set policy prefix-list6 ipv6-bogon-prefixes rule 9 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 9 description 'unique local address'
set policy prefix-list6 ipv6-bogon-prefixes rule 9 ge '7'
set policy prefix-list6 ipv6-bogon-prefixes rule 9 prefix 'fc00::/7'
set policy prefix-list6 ipv6-bogon-prefixes rule 10 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 10 description 'link local address'
set policy prefix-list6 ipv6-bogon-prefixes rule 10 ge '10'
set policy prefix-list6 ipv6-bogon-prefixes rule 10 prefix 'fe80::/10'
set policy prefix-list6 ipv6-bogon-prefixes rule 11 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 11 description 'reserved (formerly site local address)'
set policy prefix-list6 ipv6-bogon-prefixes rule 11 ge '10'
set policy prefix-list6 ipv6-bogon-prefixes rule 11 prefix 'fec0::/10'
set policy prefix-list6 ipv6-bogon-prefixes rule 12 action 'permit'
set policy prefix-list6 ipv6-bogon-prefixes rule 12 description 'multicast address'
set policy prefix-list6 ipv6-bogon-prefixes rule 12 ge '8'
set policy prefix-list6 ipv6-bogon-prefixes rule 12 prefix 'ff00::/8'

set policy route-map bgp-egress-basic rule 1 action 'deny'
set policy route-map bgp-egress-basic rule 1 description 'deny bogon prefixes'
set policy route-map bgp-egress-basic rule 1 match ipv6 address prefix-list 'ipv6-bogon-prefixes'
set policy route-map bgp-egress-basic rule 2 action 'permit'
set policy route-map bgp-egress-basic rule 2 description 'allow prefixes from AS213164 zatsu'
set policy route-map bgp-egress-basic rule 2 match ipv6 address prefix-list 'as213164-ipv6-zatsu'

set policy route-map bgp-ingress-basic rule 1 action 'deny'
set policy route-map bgp-ingress-basic rule 1 description 'deny bogon prefixes'
set policy route-map bgp-ingress-basic rule 1 match ipv6 address prefix-list 'ipv6-bogon-prefixes'
set policy route-map bgp-ingress-basic rule 2 action 'deny'
set policy route-map bgp-ingress-basic rule 2 description 'deny prefixes advertised by AS213164 zatsu'
set policy route-map bgp-ingress-basic rule 2 match ipv6 address prefix-list 'as213164-ipv6-zatsu'

set policy route-map bgp-ingress-basic rule 60000 action 'permit'
set policy route-map bgp-ingress-basic rule 60000 description 'accept good prefixes'

set protocols bgp address-family ipv6-unicast network 2a10:2f00:18a:8803:3088::/80
set protocols bgp neighbor 2a10:2f00:18a:2000::fffe description 'Watakushi v6'
set protocols bgp neighbor 2a10:2f00:18a:2000::fffe peer-group 'as213164-ipv6'

set protocols bgp peer-group as213164-ipv6 address-family ipv6-unicast route-map export 'bgp-egress-basic'
set protocols bgp peer-group as213164-ipv6 address-family ipv6-unicast route-map import 'bgp-ingress-basic'
set protocols bgp peer-group as213164-ipv6 address-family ipv6-unicast soft-reconfiguration inbound
set protocols bgp peer-group as213164-ipv6 remote-as '213164'
set protocols bgp system-as '213164'

set system host-name 'vyos-workbench1.vmhost-1.tsukuba-1.watakushi.yusuke.pub'