Physical connection
SPEED-IX offers the following physical connection possibilities:
- 1 / 10Gb SFP / SFP + (SR / LR / ER / ZR);
- 100/1000/10000 Mb (10GBaseT) RJ45;
- 40Gb QSFP + with SR4 / LR4;
- 100Gb QSFP28 + with SR4 / LR4;
Ethertypes and MAC addresses allowed
Only one MAC address per port connected to SPEED-IX peering VLAN is allowed.
The expected Ethernet frame types are as follows:
- 0x0800 – IPv4
- 0x0806 – ARP
- 0x86dd – IPv6
Allowed Traffic
The following protocols are allowed at the data link level:
- ARP
- IPv6 ND
- Traffic must be restricted to unicast traffic with the exception of ARP broadcast packets and IPv6ND multicast packets
Members should not send any link-local and other unauthorized protocol traffic to the ports, such as the following:
- Proxy ARP
- ICMP redirects
- IEEE 802 Spanning Tree
- Proprietary protocols from different manufacturers, especially discovery:
- Discovery protocols: CDP, EDP, MDP
- VLAN / trunking protocols: VTP, DTP
- Internal routing protocol broadcasts (e.g. OSPF, ISIS, IGRP, EIGRP)
- BOOTP/DHCP
- ICMPv6 ND-RA
Interface configurations:
We recommend the following interface configurations for routers based on CISCO configurations:
no ip redirects no ip proxy-arp no ip directed-broadcast no mop enabled no cdp enable udld port disable no keepalive
For IPv6:
no ipv6 redirects ipv6 nd suppressor
BGP peering connection
Addressing SPEED-IX
The IPv4 and IPv6 addressing space assigned to SPEED-IX should not be advertised outside the SPEED-IX infrastructure.
BGP SPEED-IX
ASn: 41441
IRR Record: AS-IX or AS-SPEED-IX
SPEED-IX RS1
IPv4: 185.1.95.100
IPv6: 2001:7F8:B7::A504:1441:1
SPEED-IX RS2
IPv4: 185.1.95.200
IPv6: 2001:7F8:B7::A504:1441:2
Below follows a sample configuration for Cisco routers to announce a prefix to the route servers:
! router bgp your-asn bgp always-compare-med no bgp enforce-first-as bgp log-neighbor-changes neighbor SPEED-IX-RS peer-group neighbor SPEED-IX-RS remote-as 41441 neighbor SPEED-IX-RS version 4 neighbor SPEED-IX-RS transport connection-mode active neighbor SPEED-IX-RS-6 peer-group neighbor SPEED-IX-RS-6 remote-as 41441 neighbor SPEED-IX-RS-6 version 4 neighbor SPEED-IX-RS-6 transport connection-mode active neighbor 185.1.95.100 peer-group SPEED-IX-RS neighbor 185.1.95.100 description rs1.speed-ix.net neighbor 185.1.95.200 peer-group SPEED-IX-RS neighbor 185.1.95.200 description rs2.speed-ix.net neighbor 2001:7F8:B7::A504:1441:1 peer-group SPEED-IX-RS-6 neighbor 2001:7F8:B7::A504:1441:1 description rs1.speed-ix.net neighbor 2001:7F8:B7::A504:1441:2 peer-group SPEED-IX-RS-6 neighbor 2001:7F8:B7::A504:1441:2 description rs2.speed-ix.net ! address-family ipv4 neighbor SPEED-IX-RS activate neighbor SPEED-IX-RS next-hop-self neighbor SPEED-IX-RS soft-reconfiguration inbound neighbor SPEED-IX-RS route-map TO-SPEED-IX-RS out no auto-summary no synchronization neighbor 185.1.95.100 peer-group SPEED-IX-RS neighbor 185.1.95.200 peer-group SPEED-IX-RS network 192.168.110.0 mask 255.255.255.0 network 192.168.111.0 mask 255.255.255.0 network 192.168.112.0 mask 255.255.255.0 exit-address-family ! address-family ipv6 neighbor SPEED-IX-RS-6 activate neighbor SPEED-IX-RS-6 next-hop-self neighbor SPEED-IX-RS-6 soft-reconfiguration inbound neighbor SPEED-IX-RS-6 route-map TO-SPEED-IX-RS out neighbor 2001:7F8:B7::A504:1441:1 peer-group SPEED-IX-RS-6 neighbor 2001:7F8:B7::A504:1441:2 peer-group SPEED-IX-RS-6 network 2001:DB8:10::/64 network 2001:DB8:11::/64 network 2001:DB8:12::/64 exit-address-family ! ip prefix-list TO-SPEED-IX-RS seq 10 permit 192.168.110.0/24 ip prefix-list TO-SPEED-IX-RS seq 20 permit 192.168.111.0/24 ip prefix-list TO-SPEED-IX-RS seq 30 permit 192.168.112.0/24 ! ipv6 prefix-list TO-SPEED-IX-RS seq 10 permit 2001:DB8:10::/64 ipv6 prefix-list TO-SPEED-IX-RS seq 20 permit 2001:DB8:11::/64 ipv6 prefix-list TO-SPEED-IX-RS seq 30 permit 2001:DB8:12::/64 ! route-map TO-SPEED-IX-RS permit 10 match ip address prefix-list TO-SPEED-IX-RS ! end
Below is a similar example for Juniper routers:
[edit] user@junix# show protocols bgp group IPV4-SPEED-IX-RS { type external; description "SPEED-IX Route Servers"; family inet { unicast; } export TO-SPEED-IX-RS; peer-as 41441; neighbor 185.1.95.100 { description rs1.speed-ix.net; } neighbor 185.1.95.200 { description rs2.speed-ix.net; } } [edit] user@junix# show policy-options policy-statement TO-SPEED-IX-RS term unicast-export { from { rib inet.0; prefix-list to-speed-ix-announce; } then accept; } term end { then reject; } [edit] user@junix# show policy-options prefix-list to-dpeed-ix-announce 192.168.110.0/24;
Below is a similar example for Huawei routers:
bgp your-asn undo check-first-as group SPEED-IX-RS external peer SPEED-IX-RS as-number 41441 peer SPEED-IX-RS description *** SPEED-IX Route Servers *** peer 185.1.95.100 as-number 41441 peer 185.1.95.100 group SPEED-IX-RS peer 185.1.95.200 as-number 41441 peer 185.1.95.200 group SPEED-IX-RS peer 2001:7F8:B7::A504:1441:1 as-number 41441 peer 2001:7F8:B7::A504:1441:1 group SPEED-IX-RS peer 2001:7F8:B7::A504:1441:2 as-number 41441 peer 2001:7F8:B7::A504:1441:2 group SPEED-IX-RS # ipv4-family unicast network 192.168.110.0 255.255.255.0 network 192.168.111.0 255.255.255.0 network 192.168.112.0 255.255.255.0 peer SPEED-IX-RS enable peer SPEED-IX-RS route-policy EBGP_SPEED-IX_OUT export peer SPEED-IX-RS advertise-community both peer SPEED-IX-RS advertise-ext-community both peer 185.1.95.100 enable peer 185.1.95.100 group SPEED-IX-RS peer 185.1.95.200 enable peer 185.1.95.200 group SPEED-IX-RS # ipv6-family unicast network 2001:DB8:10:: 64 network 2001:DB8:11:: 64 network 2001:DB8:12:: 64 peer SPEED-IX-RS enable peer SPEED-IX-RS route-policy 6EBGP_SPEED-IX_OUT export peer SPEED-IX-RS advertise-community both peer SPEED-IX-RS advertise-ext-community both peer 2001:7F8:B7::A504:1441:1 enable peer 2001:7F8:B7::A504:1441:1 group SPEED-IX-RS peer 2001:7F8:B7::A504:1441:2 enable peer 2001:7F8:B7::A504:1441:2 group SPEED-IX-RS # route-policy EBGP_SPEED-IX_OUT permit node 10 if-match ip-prefix TO-SPEED-IX-RS # route-policy 6EBGP_SPEED-IX_OUT permit node 10 if-match ipv6 address prefix-list 6TO-SPEED-IX-RS # ip prefix-list TO-SPEED-IX-RS index 10 permit 192.168.110.0 24 ip prefix-list TO-SPEED-IX-RS index 20 permit 192.168.111.0 24 ip prefix-list TO-SPEED-IX-RS index 30 permit 192.168.112.0 24 # ip ipv6-prefix 6TO-SPEED-IX-RS index 10 permit 2001:DB8:10:: 64 ip ipv6-prefix 6TO-SPEED-IX-RS index 20 permit 2001:DB8:11:: 64 ip ipv6-prefix 6TO-SPEED-IX-RS index 30 permit 2001:DB8:12:: 64 # commit