Merge pull request #3448 from chiragshah6/evpn_dev1

[mirror_frr.git] / doc / user / rpki.rst

diff --git a/doc/user/rpki.rst b/doc/user/rpki.rst
index 86d88dcf9b2f83798b11c839d1fe5d4a264c9098..295a26fda9f7a0ba2924dcfbae329a1efa09acb1 100644 (file)
--- a/doc/user/rpki.rst
+++ b/doc/user/rpki.rst
@@ -44,6 +44,9 @@ In a nutshell, the current implementation provides the following features
 - Route maps can be configured to match a specific RPKI validation state. This
   allows the creation of local policies, which handle BGP routes based on the
   outcome of the Prefix Origin Validation.
+- Updates from the RPKI cache servers are directly applied and path selection
+  is updated accordingly. (Soft reconfiguration **must** be enabled for this
+  to work).
 
 
 .. _enabling-rpki:
@@ -57,12 +60,40 @@ Enabling RPKI
    This command enables the RPKI configuration mode. Most commands that start
    with *rpki* can only be used in this mode.
 
-   When it is used in a telnet session, leaving of this mode cause rpki to be initialized.
+   When it is used in a telnet session, leaving of this mode cause rpki to be
+   initialized.
 
    Executing this command alone does not activate prefix validation. You need
    to configure at least one reachable cache server. See section
    :ref:`configuring-rpki-rtr-cache-servers` for configuring a cache server.
 
+.. index:: RPKI and daemons
+
+When first installing FRR with RPKI support from the pre-packaged binaries.
+Remember to add ``-M rpki`` to the variable ``bgpd_options`` in
+:file:`/etc/frr/daemons` , like so::
+
+   bgpd_options="   -A 127.0.0.1 -M rpki"
+
+instead of the default setting::
+
+   bgpd_options="   -A 127.0.0.1"
+
+Otherwise you will encounter an error when trying to enter RPKI
+configuration mode due to the ``rpki`` module not being loaded when the BGP
+daemon is initialized.
+
+Examples of the error::
+
+   router(config)# debug rpki
+   % [BGP] Unknown command: debug rpki
+
+   router(config)# rpki
+   % [BGP] Unknown command: rpki
+
+Note that the RPKI commands will be available in vtysh when running
+``find rpki`` regardless of whether the module is loaded.
+
 .. _configuring-rpki-rtr-cache-servers:
 
 Configuring RPKI/RTR Cache Servers
@@ -164,7 +195,7 @@ Validating BGP Updates
     In the following example, the router prefers valid routes over invalid
     prefixes because invalid routes have a lower local preference.
 
-    ::
+    .. code-block:: frr
 
        ! Allow for invalid routes in route selection process
        route bgp 60001
@@ -213,7 +244,7 @@ Displaying RPKI
 RPKI Configuration Example
 --------------------------
 
-::
+.. code-block:: frr
 
    hostname bgpd1
    password zebra