===== 6wind =====

===Requirements for fast-path===

On the host:
<code - SHELL>

sudo sysctl -w vm.nr_hugepages=2048

sudo setenforce 0

ausearch -c 'nm-dispatcher' --raw | audit2allow -M my-nmdispatcher
semodule -X 300 -i my-nmdispatcher.pp

ausearch -c '30-winbind' --raw | audit2allow -M my-30winbind
semodule -X 300 -i my-30winbind.pp

grep Huge /proc/meminfo

</code>

<code - /etc/selinux/config>
SELINUX=permissive
</code>

<code - /etc/sysctl.conf>
...
vm.nr_hugepages=2048
...
</code>

Containerlab node definition:
<code - 6wind1.clab.yaml>
...
pe1:
      kind: 6wind_vsr
      image: download.6wind.com/vsr/x86_64-ce/3.12:3.12.0.1
      startup-config: clab-srv6-6wind1/pe1/user-startup.conf
      cpu: 4
      memory: 4GB
      binds:
        - /dev/hugepages:/dev/hugepages
        - /dev/shm:/dev/shm:rw
...
</code>


=== 6wind - L3VPN SRv6 ===
<code - clab-srv6-6wind1/pe1/user-startup.conf>
/ vrf main l3vrf BLUE table-id 11
/ vrf main l3vrf BLUE interface infrastructure eth3 ipv4 address 192.168.231.1/24
/ vrf main l3vrf BLUE interface infrastructure eth3 ipv6 address fd7a:7573:e7ae::1/64
/ vrf main l3vrf BLUE interface infrastructure eth3 port infra-eth3
/ vrf main l3vrf BLUE routing bgp ebgp-requires-policy false
/ vrf main l3vrf BLUE routing bgp segment-routing ipv6 locator locator0
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast l3vpn export vpn true
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast l3vpn export route-target 65000:102
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast l3vpn export route-distinguisher 172.16.0.11:65501
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast l3vpn export ipv6-sid auto
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast l3vpn import vpn true
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast l3vpn import route-target 65000:102
/ vrf main l3vrf BLUE routing bgp address-family ipv4-unicast redistribute connected
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast l3vpn export vpn true
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast l3vpn export route-target 65000:102
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast l3vpn export route-distinguisher 172.16.0.11:65501
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast l3vpn export ipv6-sid auto
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast l3vpn import vpn true
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast l3vpn import route-target 65000:102
/ vrf main l3vrf BLUE routing bgp address-family ipv6-unicast redistribute connected
/ vrf main l3vrf RED table-id 10
/ vrf main l3vrf RED interface infrastructure eth2 ipv4 address 192.168.131.1/24
/ vrf main l3vrf RED interface infrastructure eth2 ipv6 address fd6c:9683:4a2d::1/64
/ vrf main l3vrf RED interface infrastructure eth2 network-stack ipv6 accept-segment-routing true
/ vrf main l3vrf RED interface infrastructure eth2 port infra-eth2
/ vrf main l3vrf RED routing bgp ebgp-requires-policy false
/ vrf main l3vrf RED routing bgp segment-routing ipv6 locator locator0
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast l3vpn export vpn true
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast l3vpn export route-target 65000:101
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast l3vpn export route-distinguisher 172.16.0.11:65500
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast l3vpn export ipv6-sid auto
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast l3vpn import vpn true
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast l3vpn import route-target 65000:101
/ vrf main l3vrf RED routing bgp address-family ipv4-unicast redistribute connected
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast l3vpn export vpn true
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast l3vpn export route-target 65000:101
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast l3vpn export route-distinguisher 172.16.0.11:65500
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast l3vpn export ipv6-sid auto
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast l3vpn import vpn true
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast l3vpn import route-target 65000:101
/ vrf main l3vrf RED routing bgp address-family ipv6-unicast redistribute connected
/ vrf main interface infrastructure eth1 mtu 9216
/ vrf main interface infrastructure eth1 ipv6 address 2001:db8:1::2/64
/ vrf main interface infrastructure eth1 network-stack ipv6 accept-segment-routing true
/ vrf main interface infrastructure eth1 port infra-eth1
/ vrf main interface loopback lo0 ipv6 address 2001:db8:a::1/128
/ vrf main routing interface eth1 isis area-tag SR
/ vrf main routing interface eth1 isis ipv4-routing true
/ vrf main routing interface eth1 isis ipv6-routing true
/ vrf main routing interface eth1 isis network-point-to-point true
/ vrf main routing interface lo0 isis area-tag SR
/ vrf main routing interface lo0 isis ipv4-routing true
/ vrf main routing interface lo0 isis ipv6-routing true
/ vrf main routing bgp as 65566
/ vrf main routing bgp router-id 172.16.0.11
/ vrf main routing bgp segment-routing ipv6 locator locator0
/ vrf main routing bgp address-family ipv6-unicast
/ vrf main routing bgp neighbor-group RR remote-as 65566
/ vrf main routing bgp neighbor-group RR capabilities extended-nexthop true
/ vrf main routing bgp neighbor-group RR password cisco123
/ vrf main routing bgp neighbor-group RR update-source 2001:db8:a::1
/ vrf main routing bgp neighbor-group RR address-family ipv4-vpn soft-reconfiguration-inbound true
/ vrf main routing bgp neighbor-group RR address-family ipv6-vpn soft-reconfiguration-inbound true
/ vrf main routing bgp neighbor 2001:db8:101::1 neighbor-group RR
/ vrf main routing bgp neighbor 2001:db8:101::1 neighbor-description RR1
/ vrf main routing isis instance SR area-address 49.0000.0000.0000.0011.00
/ vrf main routing isis instance SR log-adjacency-changes true
/ vrf main routing isis instance SR segment-routing enabled true
/ vrf main routing isis instance SR segment-routing ipv6 locator locator0
/ vrf main routing segment-routing enabled true
/ vrf main routing segment-routing ipv6 locator locator0 prefix 2001:db8:a::/48
/ vrf main routing segment-routing ipv6 locator locator0 block-length 32
/ vrf main routing segment-routing ipv6 locator locator0 node-length 16
/ vrf main routing segment-routing ipv6 locator locator0 mode-micro-sid-f3216
/ vrf main ssh-server
/ system network-stack ipv6 accept-segment-routing true
/ system auth user admin role admin
/ system auth user admin authorized-key "<REMOVED>"
/ system auth user admin authorized-key "<REMOVED>"
/ system auth user admin authorized-key "<REMOVED>"
/ system fast-path virtual-port infrastructure infra-eth1
/ system fast-path virtual-port infrastructure infra-eth2
/ system fast-path virtual-port infrastructure infra-eth3
/ system fast-path advanced reserve-hugepages false
</code>