Prepare Access
Use a dedicated account with only the permissions needed for the relevant vtysh show commands. Do not use root. Restrict SSH source access to RouteGlass and use a dedicated SSH key.
Installer Inputs
Enable BGP Lookup and select backend 3, VyOS/FRRouting. Provide the router address, SSH port (default 22), username and private-key path. The installer stores the key at /etc/routeglass/ssh/vyos_routeglass, pins the host key in /etc/routeglass/ssh/vyos_known_hosts and records connection details in its protected configuration.
Commands Used
RouteGlass first identifies the covering route and then queries the selected BGP prefix. TARGET and PREFIX below are placeholders:
vtysh -c "show ip route TARGET json"
vtysh -c "show bgp ipv4 unicast PREFIX json"
vtysh -c "show ipv6 route TARGET json"
vtysh -c "show bgp ipv6 unicast PREFIX json"Verify Permissions
Confirm that the chosen account can execute the required commands and obtain JSON output. Check network reachability, key ownership/readability and host-key trust if a query fails. A router host-key replacement must be independently verified.