### Speaker Pod のログ
$ kubectl logs -n metallb metallb-speaker-klrfl -f
{"caller":"arp.go:110","interface":"eth0","ip":"192.168.68.230","level":"debug","msg":"got ARP request for service IP, sending response","responseMAC":"dc:a6:32:bf:8b:77","senderIP":"192.168.68.230","senderMAC":"dc:a6:32:bf:8b:a8","ts":"2024-01-19T16:57:14Z"}

### node01（dc:a6:32:bf:8b:77）の tcpdump ログ
$ sudo tcpdump -n -i eth0 arp
01:59:11.152257 ARP, Request who-has 192.168.68.230 tell 192.168.68.110, length 46
01:59:11.152584 ARP, Reply 192.168.68.230 is-at dc:a6:32:bf:8b:77, length 46

### nftables（iptables）の Chain 抜粋
$ sudo nft list ruleset
table ip nat {
    ### Kubernetes Services Chain
	chain KUBE-SERVICES {
		meta l4proto tcp ip daddr 192.168.68.230  tcp dport 80 counter packets 2 bytes 128 jump KUBE-EXT-B632OJDRW4P5YOHD
	}

    ### Kubernetes External Chain
    chain KUBE-EXT-B632OJDRW4P5YOHD {
		counter packets 2 bytes 128 jump KUBE-MARK-MASQ
		counter packets 2 bytes 128 jump KUBE-SVC-B632OJDRW4P5YOHD
	}

    ### Kubernetes Service Chain
	chain KUBE-SVC-B632OJDRW4P5YOHD {
		meta l4proto tcp ip saddr != 10.16.0.0/12 ip daddr 10.1.6.20  tcp dport 80 counter packets 0 bytes 0 jump KUBE-MARK-MASQ
		counter packets 2 bytes 128 jump KUBE-SEP-37JRHLZWAFYMZLYB
	}

    ### Kubernetes Service End-Point Chain
    chain KUBE-SEP-37JRHLZWAFYMZLYB {
		ip saddr 10.16.2.132  counter packets 0 bytes 0 jump KUBE-MARK-MASQ
		meta l4proto tcp   counter packets 2 bytes 128 dnat to 10.16.2.132:80
	}

    ### Kubernetes Mark Masquerade Chain
    chain KUBE-MARK-MASQ {
		counter packets 2 bytes 128 meta mark set mark or 0x4000
	}

    ### Kubernetes Postrouting Chain
    chain KUBE-POSTROUTING {
		meta mark & 0x00004000 != 0x00004000 counter packets 218 bytes 15414 return
		counter packets 2 bytes 128 meta mark set mark xor 0x4000
		counter packets 2 bytes 128 masquerade fully-random
	}

    ### Flannel Postrouting Chain
    chain FLANNEL-POSTRTG {
		meta mark & 0x00004000 == 0x00004000  counter packets 0 bytes 0 return
		ip saddr 10.16.1.0/24 ip daddr 10.16.0.0/12  counter packets 25303 bytes 1546105 return
		ip saddr 10.16.0.0/12 ip daddr 10.16.1.0/24  counter packets 2050 bytes 151037 return
		ip saddr != 10.16.0.0/12 ip daddr 10.16.1.0/24  counter packets 0 bytes 0 return
		ip saddr 10.16.0.0/12 ip daddr != 224.0.0.0/4  counter packets 327 bytes 20914 masquerade fully-random
		ip saddr != 10.16.0.0/12 ip daddr 10.16.0.0/12  counter packets 0 bytes 0 masquerade fully-random
	}
}

$ kubectl get svc -n nginx -o wide
NAME        TYPE           CLUSTER-IP   EXTERNAL-IP      PORT(S)        AGE    SELECTOR
nginx-svc   LoadBalancer   10.1.6.20    192.168.68.230   80:32749/TCP   150d   app=nginx-pod

$ kubectl get pod -n nginx nginx-deployment-649fcbf54f-sgc27 -o wide
NAME                                READY   STATUS    RESTARTS       AGE    IP            NODE     NOMINATED NODE   READINESS GATES
nginx-deployment-649fcbf54f-sgc27   1/1     Running   12 (10d ago)   150d   10.16.2.132   node02   <none>           <none>

### KUBE-MARK-MASQ のマスカレードマーク（0x4000）が付与されたパケットには手を出さない
meta mark & 0x00004000 == 0x00004000  counter packets 0 bytes 0 return

### クラスタ内の Pod 間通信は SNAT はしない
ip saddr 10.16.1.0/24 ip daddr 10.16.0.0/12  counter packets 25303 bytes 1546105 return
ip saddr 10.16.0.0/12 ip daddr 10.16.1.0/24  counter packets 2050 bytes 151037 return

### kube-proxy ですでにマークがついていることを前提に Flannel での再 SNAT はしない
ip saddr != 10.16.0.0/12 ip daddr 10.16.1.0/24  counter packets 0 bytes 0 return

### Pod からインターネットへの Egress 通信に SNAT を適用（マルチキャスト通信は除く）
ip saddr 10.16.0.0/12 ip daddr != 224.0.0.0/4  counter packets 327 bytes 20914 masquerade fully-random

### インターネットから Pod への Ingress 通信に SNAT を適用 👈　※ これによってクライアントの送信元 IP アドレスが分からなくなる
ip saddr != 10.16.0.0/12 ip daddr 10.16.0.0/12  counter packets 0 bytes 0 masquerade fully-random

### Flannel の NIC IP アドレス の確認
$ ip a
5: flannel.1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN group default
    link/ether 62:fe:17:01:07:83 brd ff:ff:ff:ff:ff:ff
    inet 10.16.1.0/32 scope global flannel.1
       valid_lft forever preferred_lft forever

### 192.168.68.230 に対してリクエストを送信
$ curl -I 192.168.68.230
HTTP/1.1 200 OK
Server: nginx/1.27.5
Date: Sat, 20 Jan 2024 18:53:56 GMT
Content-Type: text/html
Content-Length: 615
Last-Modified: Mon, 15 Jan 2024 12:01:11 GMT
Connection: keep-alive
ETag: "67ff9c07-267"
Accept-Ranges: bytes

root@nginx-deployment-649fcbf54f-sgc27:/$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0@if7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default
    link/ether b6:fa:8b:97:24:81 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 10.16.2.132/24 brd 10.16.2.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::b4fa:8bff:fe97:2481/64 scope link
       valid_lft forever preferred_lft forever

root@nginx-deployment-649fcbf54f-sgc27:/$ tcpdump -i eth0
### TCP Three-Way Handshake
18:48:32.946040 IP 10.16.1.0.44844 > nginx-deployment-649fcbf54f-sgc27.80: Flags [S], seq 3262481042, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 1193186584 ecr 0,sackOK,eol], length 0
18:48:32.946090 IP nginx-deployment-649fcbf54f-sgc27.80 > 10.16.1.0.44844: Flags [S.], seq 1274636909, ack 3262481043, win 64308, options [mss 1410,sackOK,TS val 971138469 ecr 1193186584,nop,wscale 7], length 0
18:48:32.949858 IP 10.16.1.0.44844 > nginx-deployment-649fcbf54f-sgc27.80: Flags [.], ack 1, win 2054, options [nop,nop,TS val 1193186594 ecr 971138469], length 0

### HTTP Request / Response（GET Method）
18:48:32.949976 IP 10.16.1.0.44844 > nginx-deployment-649fcbf54f-sgc27.80: Flags [P.], seq 1:78, ack 1, win 2054, options [nop,nop,TS val 1193186594 ecr 971138469], length 77: HTTP: GET / HTTP/1.1
18:48:32.950005 IP nginx-deployment-649fcbf54f-sgc27.80 > 10.16.1.0.44844: Flags [.], ack 78, win 502, options [nop,nop,TS val 971138473 ecr 1193186594], length 0
18:48:32.950616 IP nginx-deployment-649fcbf54f-sgc27.80 > 10.16.1.0.44844: Flags [P.], seq 1:239, ack 78, win 502, options [nop,nop,TS val 971138473 ecr 1193186594], length 238: HTTP: HTTP/1.1 200 OK
18:48:32.950890 IP nginx-deployment-649fcbf54f-sgc27.80 > 10.16.1.0.44844: Flags [P.], seq 239:854, ack 78, win 502, options [nop,nop,TS val 971138474 ecr 1193186594], length 615: HTTP
18:48:32.958603 IP 10.16.1.0.44844 > nginx-deployment-649fcbf54f-sgc27.80: Flags [.], ack 854, win 2041, options [nop,nop,TS val 1193186603 ecr 971138474], length 0

### TCP Connection Close
18:48:32.959317 IP 10.16.1.0.44844 > nginx-deployment-649fcbf54f-sgc27.80: Flags [F.], seq 78, ack 854, win 2048, options [nop,nop,TS val 1193186603 ecr 971138474], length 0
18:48:32.959435 IP nginx-deployment-649fcbf54f-sgc27.80 > 10.16.1.0.44844: Flags [F.], seq 854, ack 79, win 502, options [nop,nop,TS val 971138482 ecr 1193186603], length 0
18:48:32.962756 IP 10.16.1.0.44844 > nginx-deployment-649fcbf54f-sgc27.80: Flags [.], ack 855, win 2048, options [nop,nop,TS val 1193186607 ecr 971138482], length 0

$ vagrant plugin install vagrant-libvirt
$ vagrant plugin install vagrant-vyos

$ vagrant status
Current machine states:

master                    running (libvirt)
node01                    running (libvirt)
node02                    running (libvirt)
node03                    running (libvirt)
router                    running (libvirt)

This environment represents multiple VMs. The VMs are all listed
above with their current state. For more information about a specific
VM, run `vagrant status NAME`.

### クラスタコンポーネントの確認
$ kubectl get pod -A -o wide
NAMESPACE     NAME                                  READY   STATUS    RESTARTS        AGE     IP                NODE     NOMINATED NODE   READINESS GATES
flannel       kube-flannel-ds-4nr68                 1/1     Running   0               27s     192.168.121.133   master   <none>           <none>
flannel       kube-flannel-ds-gk6jm                 1/1     Running   0               27s     192.168.121.222   node02   <none>           <none>
flannel       kube-flannel-ds-p2k78                 1/1     Running   0               27s     192.168.121.95    node01   <none>           <none>
flannel       kube-flannel-ds-qbjz8                 1/1     Running   0               27s     192.168.121.245   node03   <none>           <none>
kube-system   coredns-5dd5756b68-bt4w7              1/1     Running   0               27m     10.16.0.2         master   <none>           <none>
kube-system   coredns-5dd5756b68-gxvvs              1/1     Running   0               27m     10.16.0.3         master   <none>           <none>
kube-system   etcd-master                           1/1     Running   0               27m     192.168.121.133   master   <none>           <none>
kube-system   kube-apiserver-master                 1/1     Running   0               27m     192.168.121.133   master   <none>           <none>
kube-system   kube-controller-manager-master        1/1     Running   0               27m     192.168.121.133   master   <none>           <none>
kube-system   kube-proxy-ddcx4                      1/1     Running   0               27m     192.168.121.95    node01   <none>           <none>
kube-system   kube-proxy-hbfxx                      1/1     Running   0               27m     192.168.121.133   master   <none>           <none>
kube-system   kube-proxy-qkx66                      1/1     Running   0               27m     192.168.121.222   node02   <none>           <none>
kube-system   kube-proxy-wwntt                      1/1     Running   0               27m     192.168.121.245   node03   <none>           <none>
kube-system   kube-scheduler-master                 1/1     Running   0               27m     192.168.121.133   master   <none>           <none>

$ vagrant ssh router

vyos@router:~$ show version
Version:          VyOS 1.5-rolling-202310120020
Release train:    current

Built by:         [email protected]
Built on:         Thu 12 Oct 2023 01:43 UTC
Build UUID:       bf1ce2c0-f635-47b0-979f-57dacb6b6070
Build commit ID:  c0662f75cd8a54

Architecture:     x86_64
Boot via:         installed image
System type:      QEMU guest

Hardware vendor:  QEMU
Hardware model:   Standard PC (i440FX + PIIX, 1996)
Hardware S/N:
Hardware UUID:    99b96297-b3a6-4532-a2ea-ab355a7bed36

Copyright:        VyOS maintainers and contributors

### ルータ設定モードに切り替える
vyos@router:~$ configure

### 既存設定を削除
vyos@router% delete protocols bgp

### バナー設定
vyos@router% set system login banner post-login "Hello, VyOS router for MetalLB!!"

### BGP プロトコルを設定して ASN 64512 を割り当てる
vyos@router% set protocols bgp system-as 64512

### ASN 64512 を管理する BGP ルータの ID を設定する
vyos@router% set protocols bgp parameters router-id 1.1.1.1

### 10.10.0.0/20 ネットワークを BGP ピア（近隣ルータ）にアドバタイズして他の BGP ピアにこのネットワーク情報を提供する
vyos@router% set protocols bgp address-family ipv4-unicast network 10.10.0.0/20

### BGP ピア（近隣ルータ）として IP アドレス 172.16.7.11 ASN 64522 のルータを指定して BGP セッションを確立する
vyos@router% set protocols bgp neighbor 172.16.7.11 remote-as 64522
vyos@router% set protocols bgp neighbor 172.16.7.11 description "kubernetes-node01"
vyos@router% set protocols bgp neighbor 172.16.7.11 update-source 172.16.7.5
vyos@router% set protocols bgp neighbor 172.16.7.11 address-family ipv4-unicast soft-reconfiguration inbound
vyos@router% set protocols bgp neighbor 172.16.7.11 address-family ipv4-unicast weight 200

### BGP ピア（近隣ルータ）として IP アドレス 172.16.7.12 ASN 64522 のルータを指定して BGP セッションを確立する
vyos@router% set protocols bgp neighbor 172.16.7.12 remote-as 64522
vyos@router% set protocols bgp neighbor 172.16.7.12 description "kubernetes-node02"
vyos@router% set protocols bgp neighbor 172.16.7.12 update-source 172.16.7.5
vyos@router% set protocols bgp neighbor 172.16.7.12 address-family ipv4-unicast soft-reconfiguration inbound
vyos@router% set protocols bgp neighbor 172.16.7.12 address-family ipv4-unicast weight 200

### BGP ピア（近隣ルータ）として IP アドレス 172.16.7.13 ASN 64522 のルータを指定して BGP セッションを確立する
vyos@router% set protocols bgp neighbor 172.16.7.13 remote-as 64522
vyos@router% set protocols bgp neighbor 172.16.7.13 description "kubernetes-node03"
vyos@router% set protocols bgp neighbor 172.16.7.13 update-source 172.16.7.5
vyos@router% set protocols bgp neighbor 172.16.7.13 address-family ipv4-unicast soft-reconfiguration inbound
vyos@router% set protocols bgp neighbor 172.16.7.13 address-family ipv4-unicast weight 200

### 内部 BGP（iBGP）の最大パス数を 2 に設定する（同一 AS 内の異なる経路をルータが学習および使用できる数を制限する）
vyos@router% set protocols bgp address-family ipv4-unicast maximum-paths ibgp 2

### 設定の変更を確定し、ルータに反映させる
vyos@router% commit

### 設定を永続化して、再起動後にも設定が保持されるように保存する
vyos@router% save

### コマンドラインモードに戻る
vyos@router% exit

$ show ip bgp summary

IPv4 Unicast Summary (VRF default):
BGP router identifier 1.1.1.1, local AS number 64512 vrf-id 0
BGP table version 1
RIB entries 1, using 192 bytes of memory
Peers 3, using 61 KiB of memory

Neighbor        V         AS   MsgRcvd   MsgSent   TblVer  InQ OutQ  Up/Down State/PfxRcd   PfxSnt Desc
172.16.7.11     4      64522         0         0        0    0    0    never       Active        0 kubernetes-node01
172.16.7.12     4      64522         0         0        0    0    0    never       Active        0 kubernetes-node02
172.16.7.13     4      64522         0         0        0    0    0    never       Active        0 kubernetes-node03

Total number of neighbors 3

$ show ip bgp cidr-only
BGP table version is 1, local router ID is 1.1.1.1, vrf id 0
Default local pref 100, local AS 64512
Status codes:  s suppressed, d damped, h history, * valid, > best, = multipath,
               i internal, r RIB-failure, S Stale, R Removed
Nexthop codes: @NNN nexthop's vrf id, < announce-nh-self
Origin codes:  i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

    Network          Next Hop            Metric LocPrf Weight Path
 *> 10.10.0.0/20     0.0.0.0                  0         32768 i

Displayed  1 routes and 1 total paths

apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: network-pool-for-private-cloud
  namespace: metallb
spec:
  addresses:
    - 172.16.7.192/26 # Service に払い出す IP アドレス範囲
  autoAssign: true
  avoidBuggyIPs: true
---
apiVersion: metallb.io/v1beta2
kind: BGPPeer
metadata:
  name: worker-node-group
  namespace: metallb
spec:
  myASN: 64522
  peerASN: 64512 # BGP router's ASN
  peerAddress: 10.10.0.115 # BGP router's external network IPv4
---
apiVersion: metallb.io/v1beta1
kind: BGPAdvertisement
metadata:
  name: local
  namespace: metallb
spec:
  ipAddressPools:
    - network-pool-for-private-cloud
  peers:
    - worker-node-group
  communities:
    - 65535:65282 ## RFC1997: NO_ADVERTISE
  aggregationLength: 32
  aggregationLengthV6: 128
  localPref: 100 ## Default: 100

$ kubectl get ipaddresspool -n metallb
NAME                             AUTO ASSIGN   AVOID BUGGY IPS   ADDRESSES
network-pool-for-private-cloud   true          true              ["172.16.7.192/26"]

$ kubectl get bgppeer -n metallb
NAME                ADDRESS       ASN     BFD PROFILE   MULTI HOPS
worker-node-group   10.10.0.115   64512

$ kubectl get bgpadvertisement -n metallb
NAME    IPADDRESSPOOLS                       IPADDRESSPOOL SELECTORS   PEERS
local   ["network-pool-for-private-cloud"]                             ["worker-node-group"]

### クライアントマシンで実行
$ sudo ip route add 172.16.7.0/24 via 10.10.0.115
netstat -nvr | awk 'NR==1 || NR==2 || /172.16.7.0/'
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
172.16.7.0      10.10.0.115     255.255.255.0   UG        0 0          0 enp4s0

### 各ノード（node01 / node02 / node03）で実行
$ sudo ip route add 10.10.0.0/20 via 172.16.7.5
netstat -nvr | awk 'NR==1 || NR==2 || /10.10.0.0/'
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
10.10.0.0       172.16.7.5      255.255.240.0   UG        0 0          0 eth1

$ show ip bgp summary

IPv4 Unicast Summary (VRF default):
BGP router identifier 1.1.1.1, local AS number 64512 vrf-id 0
BGP table version 7
RIB entries 3, using 576 bytes of memory
Peers 3, using 61 KiB of memory

Neighbor        V         AS   MsgRcvd   MsgSent   TblVer  InQ OutQ  Up/Down State/PfxRcd   PfxSnt Desc
172.16.7.11     4      64522       169       167        7    0    0 01:22:20            1        1 kubernetes-node01
172.16.7.12     4      64522       168       167        7    0    0 01:22:20            0        1 kubernetes-node02
172.16.7.13     4      64522       168       167        7    0    0 01:22:20            0        1 kubernetes-node03

Total number of neighbors 3

$ kubectl get svc -n nginx nginx-svc -o wide
NAME        TYPE           CLUSTER-IP   EXTERNAL-IP    PORT(S)        AGE     SELECTOR
nginx-svc   LoadBalancer   10.1.2.185   172.16.7.192   80:31902/TCP   2m52s   app=nginx-pod

$ kubectl get pod -n nginx -o wide
nginx-deployment-bfc96bb4c-tmmvk   1/1     Running             0          9s    10.16.1.7   node01   <none>           <none>
nginx-deployment-bfc96bb4c-ln429   1/1     Running             0          9s    10.16.1.8   node01   <none>           <none>
nginx-deployment-bfc96bb4c-gfx4x   1/1     Running             0          9s    10.16.2.6   node02   <none>           <none>
nginx-deployment-bfc96bb4c-2s29d   1/1     Running             0          10s   10.16.2.7   node02   <none>           <none>
nginx-deployment-bfc96bb4c-hjfcc   1/1     Running             0          9s    10.16.3.7   node03   <none>           <none>
nginx-deployment-bfc96bb4c-b488f   1/1     Running             0          10s   10.16.3.8   node03   <none>           <none>

### クライアントマシンの IP アドレス
$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether a8:a1:59:85:13:4c brd ff:ff:ff:ff:ff:ff
    inet 10.10.0.106/20 brd 10.10.15.255 scope global noprefixroute enp4s0
       valid_lft forever preferred_lft forever
    inet6 fe80::aaa1:59ff:fe85:134c/64 scope link
       valid_lft forever preferred_lft forever

$ show ip bgp cidr-only
BGP table version is 14, local router ID is 1.1.1.1, vrf id 0
Default local pref 100, local AS 64512
Status codes:  s suppressed, d damped, h history, * valid, > best, = multipath,
               i internal, r RIB-failure, S Stale, R Removed
Nexthop codes: @NNN nexthop's vrf id, < announce-nh-self
Origin codes:  i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

    Network          Next Hop            Metric LocPrf Weight Path
 *> 10.10.0.0/20     0.0.0.0                  0         32768 i
 *= 172.16.7.192/32  172.16.7.11                          200 64522 i
 *=                  172.16.7.12                          200 64522 i
 *>                  172.16.7.13                          200 64522 i

$ kubectl logs -n metallb metallb-speaker-fzxkn -f
### 経路広報処理を開始
{"caller":"bgp_controller.go:345","event":"updatedAdvertisements","ips":["172.16.7.193"],"level":"info","msg":"making advertisements using BGP","numAds":1,"pool":"network-pool-for-private-cloud","protocol":"bgp","ts":"2024-01-22T10:54:20Z"}
### 172.16.7.192 を BGP ピアへ経路広報
{"caller":"main.go:420","event":"serviceAnnounced","ips":["172.16.7.193"],"level":"info","msg":"service has IP, announcing","pool":"network-pool-for-private-cloud","protocol":"bgp","ts":"2024-01-22T10:54:20Z"}

$ while true; do curl --silent http://172.16.7.192 | egrep 'client_address|host_name'; sleep 1; done

### AS パスが異なる場合においても 2 つの BGP ルートを等しいコストとして扱う
$ set protocols bgp parameters bestpath as-path multipath-relax

### BGP ピア（隣接ルータ）へのセッションに使用する送信元 IPv4 アドレス（またはインターフェース）を指定
$ set protocols bgp neighbor <address|interface> update-source <address|interface>

### BGPピア（隣接ルータ）の入力方向ソフト再構成（soft reconfiguration）を有効化
$ set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> soft-reconfiguration inbound

### 近隣ルートのデフォルトの重み値を指定（ASN の範囲: 1 - 65535）
$ set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> weight <number>

### 全ての BGP ネットワーク経路を表示
$ show ip bgp cidr-only

### 全ての BGP 接続ステータスを表示
$ show <ip|ipv6> bgp summary

### BGP ピア（隣接ルータ）情報を表示
$ show bgp neighbors

### 全ての設定内容を表示
$ show configuration commands