Hi Nico, many thanks. I will give it a try.

Regarding my eBGP-iBGP problem I can't ping IP's declared in the iBGP, this is my setup:

(internet)

( VM eBGP/44 ) <--- Wireguard ---> (VM iBGP/64)

In the eBGP I have [2a0e:87c0:620::/44] and in the iBGP I would like to handle only [2a0e:87c0:620:1::/64]

I do can ping from the eBGP to the IP's in iBGP and vice versa, but not from the internet, for example If I add the address [2a0e:87c0:620::10/64] in eBGP I can ping it from everywhere but If then I configure any ip in iBGP something like [2a0e:87c0:620:1::10/64] I can only ping it within the eBGP and iBGP but is not reachable from internet:

ping 2a0e:87c0:620:1::10 (not reachable)

( VM eBGP/44 ) <--- Wireguard ---> (VM iBGP [2a0e:87c0:620:1::10/64])

this is my current setup for the eBGP:

&<-----

router id <ipv4>;

define MYAS = 1234;

protocol device {
scan time 10;
}

protocol direct {
ipv6 {
import where net ~ [2a0e:87c0:620::/44{44,128}];
export none;
};
}

protocol kernel {
scan time 20;
ipv6 {
import none;
export all;
};
}

# templates
template bgp uplink {
local as MYAS;
ipv6 {
import all;
export filter {
if net = 2a0e:87c0:620::/44 then accept;
reject;
};
};
graceful restart on;
}

protocol bgp SBv6 from uplink {
neighbor 2a09:4c1:100:2d88::8bfa as 58057;
source address 2a09:4c0:100:2d98::8934;
}

protocol bgp iBGP from uplink {
debug all;
neighbor fe80:cafe::10%wg0 as MYAS;
direct;
}

&<-----

And the config for iBGP:

&<-----

router id <ipv4>;

define MYAS = 1234;

protocol device {
scan time 10;
}

protocol direct {
ipv6 {
import where net ~ [2a0e:87c0:620:1::/64{64,128}];
export none;
};
}

protocol kernel {
scan time 20;
ipv6 {
import none;
export all;
};
}

protocol bgp iBGP {
debug all;
local as MYAS;
neighbor fe80:cafe::11%wg0 as MYAS;
direct;
ipv6 {
next hop self;
import all;
export all;
};
graceful restart on;
}

&<-----

Any ideas? thanks in advance.

On Mon, Nov 29, 2021 at 8:34 AM Nico Schottelius <nico.schottelius@ungleich.ch> wrote:

Good morning Nicolas,

IP assignment is handled differently to IP routing. You can use the
"radv" protocol
(https://bird.network.cz/?get_doc&v=20&f=bird-6.html#ss6.11) for
assignment.

Best regards,

Nico

Nicolas Embriz <nbari@tequila.io> writes:

> Hi, I manage to configure, establish a session and announce my prefix with this configuration:
>
> ---
> log "/var/log/bird.log" all;
> router id <ipv4>;
> define MYAS = 1234;
>
> protocol device {
> scan time 10;
> }
>
> protocol direct {
> ipv6;
> interface "dummy*";
> }
>
> # templates
> template bgp uplink {
> local as MYAS;
> ipv6 {
> import all;
> export filter {
> if net = <ipv6::/44> then accept;
> reject;
> };
> };
> graceful restart on;
> }
>
> protocol bgp SBv6 from uplink {
> neighbor <ipv6> a as 12345;
> source address <myipvy>;
> }
> ---
>
> For testing I added to eth0 an IPv6 address alias belonging to my /44 segment, I was available to ping and so far all good, but now something that I am struggling with (probably something very basic) is how to
> do IP address assignment to my network from the router?
>
> This router is a VM but I would like to know how I could use a /64 subnet and assign IP's to my home network.
>
> Probably I am following the wrong approach, but I wanted to give a try creating an internal router (iBGP) and announce only the /64 subnet, I am using wireguard to connect the VM's but can't find a way to ping
> any IP I assign in this VM, something like this
>
> (internet)
> |
> |
> ( VM eBGP/44 ) <--- Wireguard ---> (VM iBGP/64) <----> HOME/LAN (/64)
>
> this is my config:
>
> log "/var/log/bird.log" all;
> router id <ipv4>;
> define MYAS = 1234;
>
> protocol device {
> scan time 10;
> }
>
> protocol direct {
> ipv6;
> interface "dummy*";
> }
>
> template bgp iAS {
> local as MYAS;
> ipv6 {
> import all;
> export filter {
> if net = <ipv6::/64> then accept;
> reject;
> };
> };
> graceful restart on;
> }
>
> protocol bgp iBGP from iAS {
> debug all;
> neighbor <peer wireguard ipv6>%wg0 as MYAS;
> direct;
> source address <wireguard ipv6>;
> }
>
> The session gets established but only from the eBGP I can ping the iBGP but not the other way around or from other hosts.
>
> Probably I may be over-complicating things, and I could do everything from the main router but is that the case, still wondering how can I then start to assign IPv6's address to my home network? should I
> configure something like radvd so that my devices can claim an IPv6?
>
> I am doing this just for learning purposes, so if there is a better way or practice to follow let me know.
>
> regards.

--
Sustainable and modern Infrastructures by ungleich.ch