<div dir="ltr">sharpd@janelle:~$ sudo systemctl start frr<br>sharpd@janelle:~$ vtysh -c "show rpki cache-connection"<br>No connection to RPKI cache server.<br>sharpd@janelle:~$ vtysh -c "show rpki cache-connection"<br>Connected to group 1<br>rpki tcp cache <a href="http://rpki-validator.realmv6.org">rpki-validator.realmv6.org</a> 8282 pref 1 (connected)<br><div>sharpd@janelle:~$ vtysh -c "show run" | grep -A 3 "rpki"<br> match rpki valid<br>exit<br>!<br>route-map VERIFY deny 20<br> match rpki invalid<br>exit<br>!<br>ip protocol bgp route-map DENY<br>--<br>rpki<br> rpki cache <a href="http://rpki-validator.realmv6.org">rpki-validator.realmv6.org</a> 8282 preference 1<br>exit<br>!<br>end<br></div><div><br></div><div>I'm not sure what to say, but it works for me. I am running a version of latest from the last week or so on this box.</div><div><br></div><div>donald</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Mar 22, 2023 at 7:36 AM Chris Knipe <<a href="mailto:cknipe@opticnetworks.net">cknipe@opticnetworks.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg4466374899117502433">
<div lang="EN-ZA" style="overflow-wrap: break-word;">
<div class="m_4466374899117502433WordSection1">
<p class="MsoNormal"><span>Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>So modified the config:<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki polling_period 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 preference 2<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8283 preference 3<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Restarted FRR<u></u><u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# sh rpki cache-connection
<u></u><u></u></span></p>
<p class="MsoNormal"><span>No connection to RPKI cache server.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# wr mem<u></u><u></u></span></p>
<p class="MsoNormal"><span>Note: this version of vtysh never writes vtysh.conf<u></u><u></u></span></p>
<p class="MsoNormal"><span>Building Configuration...<u></u><u></u></span></p>
<p class="MsoNormal"><span>Integrated configuration saved to /etc/frr/frr.conf<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>write mem removes the exit too.<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki polling_period 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 preference 2<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8283 preference 3<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Complete config just for clarity (didn’t want to spam the list, but seems that it is needed):<u></u><u></u></span></p>
<p class="MsoNormal"><span>frr version 8.1<u></u><u></u></span></p>
<p class="MsoNormal"><span>frr defaults traditional<u></u><u></u></span></p>
<p class="MsoNormal"><span>hostname za-ctn-rs01a<u></u><u></u></span></p>
<p class="MsoNormal"><span>log syslog informational<u></u><u></u></span></p>
<p class="MsoNormal"><span>no log unique-id<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>no ip forwarding<u></u><u></u></span></p>
<p class="MsoNormal"><span>no ipv6 forwarding<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki polling_period 300<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki retry_interval 10<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 preference 2<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8283 preference 3<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>service integrated-vtysh-config<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip router-id a.b.c.131<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip route <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> a.b.c.129<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip route <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> a.b.c.130 10<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip route a.b.c.0/23 Null0 tag 20<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip route a.b.c.0/24 Null0 tag 30<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip route a.b.d.0/24 Null0 tag 30<u></u><u></u></span></p>
<p class="MsoNormal"><span>ip route e.f.g.0/24 Null0 tag 25<u></u><u></u></span></p>
<p class="MsoNormal"><span>ipv6 route ::/0 a:b:c:6000::81<u></u><u></u></span></p>
<p class="MsoNormal"><span>ipv6 route ::/0 a:b:c:6000::82 10<u></u><u></u></span></p>
<p class="MsoNormal"><span>ipv6 route a:b:c::/48 Null0 tag 25<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>interface ens32<u></u><u></u></span></p>
<p class="MsoNormal"><span>bandwidth 10000<u></u><u></u></span></p>
<p class="MsoNormal"><span>ipv6 ospf6 area 0<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>router bgp 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp router-id a.b.c.131<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp log-neighbor-changes<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp always-compare-med<u></u><u></u></span></p>
<p class="MsoNormal"><span>no bgp suppress-duplicates<u></u><u></u></span></p>
<p class="MsoNormal"><span>no bgp default ipv4-unicast<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp cluster-id a.b.c.128<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp disable-ebgp-connected-route-check<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp graceful-shutdown<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp graceful-restart<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp route-reflector allow-outbound-policy<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.132 remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.132 description ZA-JNB-RS01B<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.139 remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.139 description ZA-CTN-RS01B<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.140 remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.140 description ZA-JNB-RS01A<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.254 remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.254 description ZA-CTN-CR01B<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.255 remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a.b.c.255 description ZA-CTN-CR01A<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::84 remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::84 description ZA-JNB-RS01B<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::8b remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::8b description ZA-CTN-RS01B<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::8c remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::8c description ZA-JNB-RS01A<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::fe remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::fe description ZA-CTN-CR01B<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::ff remote-as 65530<u></u><u></u></span></p>
<p class="MsoNormal"><span>neighbor a:b:c:6000::ff description ZA-CTN-CR01A<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgp fast-convergence<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>address-family ipv4 unicast<u></u><u></u></span></p>
<p class="MsoNormal"><span> redistribute static<u></u><u></u></span></p>
<p class="MsoNormal"><span> bgp dampening<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.132 activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.132 addpath-tx-all-paths<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.132 soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.132 allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.132 route-map BGP-RS-OUTv4 out<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.132 attribute-unchanged next-hop<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.139 activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.139 addpath-tx-all-paths<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.139 soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.139 allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.139 attribute-unchanged next-hop<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.254 activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.254 route-reflector-client<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.254 soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.254 allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.254 route-map BGP-TRANS-OUTv4 out<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.255 activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.255 route-reflector-client<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.255 soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.255 allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a.b.c.255 route-map BGP-TRANS-OUTv4 out<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit-address-family<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>address-family ipv6 unicast<u></u><u></u></span></p>
<p class="MsoNormal"><span> redistribute static<u></u><u></u></span></p>
<p class="MsoNormal"><span> bgp dampening<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8b activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8b addpath-tx-all-paths<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8b soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8b allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8b attribute-unchanged as-path next-hop med<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8c activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8c addpath-tx-all-paths<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8c soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8c allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::8c attribute-unchanged as-path next-hop<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::fe activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::fe route-reflector-client<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::fe soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::fe allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::fe route-map BGP-TRANS-OUTv6 out<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::fe attribute-unchanged as-path next-hop med<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::ff activate<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::ff route-reflector-client<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::ff soft-reconfiguration inbound<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::ff allowas-in origin<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::ff route-map BGP-TRANS-OUTv6 out<u></u><u></u></span></p>
<p class="MsoNormal"><span> neighbor a:b:c:6000::ff attribute-unchanged as-path next-hop med<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit-address-family<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>router ospf<u></u><u></u></span></p>
<p class="MsoNormal"><span>ospf router-id a.b.c.131<u></u><u></u></span></p>
<p class="MsoNormal"><span>log-adjacency-changes detail<u></u><u></u></span></p>
<p class="MsoNormal"><span>compatible rfc1583<u></u><u></u></span></p>
<p class="MsoNormal"><span>auto-cost reference-bandwidth 10000<u></u><u></u></span></p>
<p class="MsoNormal"><span>graceful-restart<u></u><u></u></span></p>
<p class="MsoNormal"><span>network a.b.c.128/29 area 0<u></u><u></u></span></p>
<p class="MsoNormal"><span>capability opaque<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>router ospf6<u></u><u></u></span></p>
<p class="MsoNormal"><span>ospf6 router-id a.b.c.131<u></u><u></u></span></p>
<p class="MsoNormal"><span>log-adjacency-changes detail<u></u><u></u></span></p>
<p class="MsoNormal"><span>auto-cost reference-bandwidth 10000<u></u><u></u></span></p>
<p class="MsoNormal"><span>graceful-restart<u></u><u></u></span></p>
<p class="MsoNormal"><span>exit<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Donald Sharp <<a href="mailto:donaldsharp72@gmail.com" target="_blank">donaldsharp72@gmail.com</a>>
<br>
<b>Sent:</b> Wednesday, 22 March 2023 13:24<br>
<b>To:</b> Chris Knipe <<a href="mailto:cknipe@opticnetworks.net" target="_blank">cknipe@opticnetworks.net</a>><br>
<b>Cc:</b> ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>; <a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a><br>
<b>Subject:</b> Re: [FROG] rpki start<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Add a `exit` to the end of rpki configuration section<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">rpki<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> rpki polling_period 1000<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 preference 2<u></u><u></u></p>
</div>
<p class="MsoNormal"> rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8283 preference 3<u></u><u></u></p>
<div>
<p class="MsoNormal">exit<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Wed, Mar 22, 2023 at 5:16 AM Chris Knipe <<a href="mailto:cknipe@opticnetworks.net" target="_blank">cknipe@opticnetworks.net</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<p class="MsoNormal">Hi,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">daemons.conf:<u></u><u></u></p>
<p class="MsoNormal">vtysh_enable=yes<u></u><u></u></p>
<p class="MsoNormal">zebra_options=" -A 127.0.0.1 -s 90000000"<u></u><u></u></p>
<p class="MsoNormal">bgpd_options=" -A 127.0.0.1 -M rpki"<u></u><u></u></p>
<p class="MsoNormal">ospfd_options=" -A 127.0.0.1"<u></u><u></u></p>
<p class="MsoNormal">ospf6d_options=" -A ::1"<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">za-ctn-rs01a# sh rpki cache-server
<u></u><u></u></p>
<p class="MsoNormal">host:
<a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> port: 8282<u></u><u></u></p>
<p class="MsoNormal">host:
<a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> port: 8283<u></u><u></u></p>
<p class="MsoNormal">za-ctn-rs01a# sh rpki cache-connection
<u></u><u></u></p>
<p class="MsoNormal">No connection to RPKI cache server.<u></u><u></u></p>
<p class="MsoNormal">za-ctn-rs01a# sh ver<u></u><u></u></p>
<p class="MsoNormal">FRRouting 8.1 (za-ctn-rs01a).<u></u><u></u></p>
<p class="MsoNormal">Copyright 1996-2005 Kunihiro Ishiguro, et al.<u></u><u></u></p>
<p class="MsoNormal">configured with:<u></u><u></u></p>
<p class="MsoNormal"> '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager'
'--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf'
'--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">config<u></u><u></u></p>
<p class="MsoNormal">Current configuration:<u></u><u></u></p>
<p class="MsoNormal">!<u></u><u></u></p>
<p class="MsoNormal">frr version 8.1<u></u><u></u></p>
<p class="MsoNormal">frr defaults traditional<u></u><u></u></p>
<p class="MsoNormal">hostname za-ctn-rs01a<u></u><u></u></p>
<p class="MsoNormal">log syslog informational<u></u><u></u></p>
<p class="MsoNormal">no log unique-id<u></u><u></u></p>
<p class="MsoNormal">service advanced-vty<u></u><u></u></p>
<p class="MsoNormal">service password-encryption<u></u><u></u></p>
<p class="MsoNormal">no ip forwarding<u></u><u></u></p>
<p class="MsoNormal">no ipv6 forwarding<u></u><u></u></p>
<p class="MsoNormal">service advanced-vty<u></u><u></u></p>
<p class="MsoNormal">service password-encryption<u></u><u></u></p>
<p class="MsoNormal">service advanced-vty<u></u><u></u></p>
<p class="MsoNormal">service password-encryption<u></u><u></u></p>
<p class="MsoNormal">service advanced-vty<u></u><u></u></p>
<p class="MsoNormal">service password-encryption<u></u><u></u></p>
<p class="MsoNormal">rpki<u></u><u></u></p>
<p class="MsoNormal">rpki polling_period 1000<u></u><u></u></p>
<p class="MsoNormal">rpki cache
<a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 preference 2<u></u><u></u></p>
<p class="MsoNormal">rpki cache
<a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8283 preference 3<u></u><u></u></p>
<p class="MsoNormal">service advanced-vty<u></u><u></u></p>
<p class="MsoNormal">service password-encryption<u></u><u></u></p>
<p class="MsoNormal">service integrated-vtysh-config<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">RPKI doesn’t do anything until I execute rpki start<u></u><u></u></p>
<p class="MsoNormal">za-ctn-rs01a# rpki start
<u></u><u></u></p>
<p class="MsoNormal">za-ctn-rs01a# sh rpki cache-connection
<u></u><u></u></p>
<p class="MsoNormal">Connected to group 2<u></u><u></u></p>
<p class="MsoNormal">rpki tcp cache
<a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 pref 2<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">--<u></u><u></u></p>
<p class="MsoNormal" style="margin-bottom:12pt">C<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Donald Sharp <<a href="mailto:donaldsharp72@gmail.com" target="_blank">donaldsharp72@gmail.com</a>>
<br>
<b>Sent:</b> Wednesday, 22 March 2023 01:00<br>
<b>To:</b> Chris Knipe <<a href="mailto:cknipe@opticnetworks.net" target="_blank">cknipe@opticnetworks.net</a>><br>
<b>Cc:</b> ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>; <a href="mailto:frog@lists.frrouting.org" target="_blank">
frog@lists.frrouting.org</a><br>
<b>Subject:</b> Re: [FROG] rpki start</span><u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">What does your config look like? Mine starts automatically, rpki is programmed to start it when you leave the rpki subnode<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">donald<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:11.55pt">
On Tue, Mar 21, 2023 at 5:15 PM Chris Knipe via frog <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<p class="MsoNormal"><br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Chris Knipe <<a href="mailto:cknipe@opticnetworks.net" target="_blank">cknipe@opticnetworks.net</a>><br>
To: ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>, "<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>" <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>><br>
Cc: <br>
Bcc: <br>
Date: Tue, 21 Mar 2023 19:00:29 +0000<br>
Subject: RE: [FROG] rpki start<br>
Hi,<br>
<br>
><br>
>Or are you referring to an RPKI (caching) server FRR connects to?<br>
><br>
<br>
Correct. RPKI doesn't automatically connect to the RPKI servers unless I issue a "rpki start" command.<br>
<br>
Configuration etc. is 100%, works absolutely fine. Just doesn't automatically connect to the RPKI servers.<br>
<br>
--<br>
Chris.<br>
<br>
<br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Chris Knipe via frog <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>><br>
To: ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>, "<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>" <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>><br>
Cc: <br>
Bcc: <br>
Date: Tue, 21 Mar 2023 19:00:29 +0000<br>
Subject: Re: [FROG] rpki start<br>
_______________________________________________<br>
frog mailing list<br>
<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a><br>
<a href="https://lists.frrouting.org/listinfo/frog" target="_blank">https://lists.frrouting.org/listinfo/frog</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div></blockquote></div>