<div dir="ltr">Add a `exit` to the end of rpki configuration section<div><br></div><div>rpki</div><div> rpki polling_period 1000</div><div> rpki cache <a href="http://rtr.rpki.cloudflare.com">rtr.rpki.cloudflare.com</a> 8282 preference 2</div> rpki cache <a href="http://rtr.rpki.cloudflare.com">rtr.rpki.cloudflare.com</a> 8283 preference 3<div>exit</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Mar 22, 2023 at 5:16 AM Chris Knipe <<a href="mailto:cknipe@opticnetworks.net">cknipe@opticnetworks.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg4828356541868716189">
<div lang="EN-ZA" style="overflow-wrap: break-word;">
<div class="m_4828356541868716189WordSection1">
<p class="MsoNormal"><span>Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>daemons.conf:<u></u><u></u></span></p>
<p class="MsoNormal"><span>vtysh_enable=yes<u></u><u></u></span></p>
<p class="MsoNormal"><span>zebra_options=" -A 127.0.0.1 -s 90000000"<u></u><u></u></span></p>
<p class="MsoNormal"><span>bgpd_options=" -A 127.0.0.1 -M rpki"<u></u><u></u></span></p>
<p class="MsoNormal"><span>ospfd_options=" -A 127.0.0.1"<u></u><u></u></span></p>
<p class="MsoNormal"><span>ospf6d_options=" -A ::1"<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# sh rpki cache-server
<u></u><u></u></span></p>
<p class="MsoNormal"><span>host: <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> port: 8282<u></u><u></u></span></p>
<p class="MsoNormal"><span>host: <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> port: 8283<u></u><u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# sh rpki cache-connection
<u></u><u></u></span></p>
<p class="MsoNormal"><span>No connection to RPKI cache server.<u></u><u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# sh ver<u></u><u></u></span></p>
<p class="MsoNormal"><span>FRRouting 8.1 (za-ctn-rs01a).<u></u><u></u></span></p>
<p class="MsoNormal"><span>Copyright 1996-2005 Kunihiro Ishiguro, et al.<u></u><u></u></span></p>
<p class="MsoNormal"><span>configured with:<u></u><u></u></span></p>
<p class="MsoNormal"><span> '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking'
'--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager'
'--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf'
'--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>config<u></u><u></u></span></p>
<p class="MsoNormal"><span>Current configuration:<u></u><u></u></span></p>
<p class="MsoNormal"><span>!<u></u><u></u></span></p>
<p class="MsoNormal"><span>frr version 8.1<u></u><u></u></span></p>
<p class="MsoNormal"><span>frr defaults traditional<u></u><u></u></span></p>
<p class="MsoNormal"><span>hostname za-ctn-rs01a<u></u><u></u></span></p>
<p class="MsoNormal"><span>log syslog informational<u></u><u></u></span></p>
<p class="MsoNormal"><span>no log unique-id<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>no ip forwarding<u></u><u></u></span></p>
<p class="MsoNormal"><span>no ipv6 forwarding<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki polling_period 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 preference 2<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8283 preference 3<u></u><u></u></span></p>
<p class="MsoNormal"><span>service advanced-vty<u></u><u></u></span></p>
<p class="MsoNormal"><span>service password-encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span>service integrated-vtysh-config<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>RPKI doesn’t do anything until I execute rpki start<u></u><u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# rpki start
<u></u><u></u></span></p>
<p class="MsoNormal"><span>za-ctn-rs01a# sh rpki cache-connection
<u></u><u></u></span></p>
<p class="MsoNormal"><span>Connected to group 2<u></u><u></u></span></p>
<p class="MsoNormal"><span>rpki tcp cache <a href="http://rtr.rpki.cloudflare.com" target="_blank">rtr.rpki.cloudflare.com</a> 8282 pref 2<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>--<u></u><u></u></span></p>
<p class="MsoNormal"><span>C<br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Donald Sharp <<a href="mailto:donaldsharp72@gmail.com" target="_blank">donaldsharp72@gmail.com</a>>
<br>
<b>Sent:</b> Wednesday, 22 March 2023 01:00<br>
<b>To:</b> Chris Knipe <<a href="mailto:cknipe@opticnetworks.net" target="_blank">cknipe@opticnetworks.net</a>><br>
<b>Cc:</b> ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>; <a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a><br>
<b>Subject:</b> Re: [FROG] rpki start<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">What does your config look like? Mine starts automatically, rpki is programmed to start it when you leave the rpki subnode<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">donald<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, Mar 21, 2023 at 5:15 PM Chris Knipe via frog <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<p class="MsoNormal"><br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Chris Knipe <<a href="mailto:cknipe@opticnetworks.net" target="_blank">cknipe@opticnetworks.net</a>><br>
To: ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>, "<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>" <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>><br>
Cc: <br>
Bcc: <br>
Date: Tue, 21 Mar 2023 19:00:29 +0000<br>
Subject: RE: [FROG] rpki start<br>
Hi,<br>
<br>
><br>
>Or are you referring to an RPKI (caching) server FRR connects to?<br>
><br>
<br>
Correct. RPKI doesn't automatically connect to the RPKI servers unless I issue a "rpki start" command.<br>
<br>
Configuration etc. is 100%, works absolutely fine. Just doesn't automatically connect to the RPKI servers.<br>
<br>
--<br>
Chris.<br>
<br>
<br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Chris Knipe via frog <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>><br>
To: ch <<a href="mailto:ch@ntrv.dk" target="_blank">ch@ntrv.dk</a>>, "<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>" <<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a>><br>
Cc: <br>
Bcc: <br>
Date: Tue, 21 Mar 2023 19:00:29 +0000<br>
Subject: Re: [FROG] rpki start<br>
_______________________________________________<br>
frog mailing list<br>
<a href="mailto:frog@lists.frrouting.org" target="_blank">frog@lists.frrouting.org</a><br>
<a href="https://lists.frrouting.org/listinfo/frog" target="_blank">https://lists.frrouting.org/listinfo/frog</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
</div></blockquote></div>