November 2020 - frog - lists.frrouting.org

Yocto Recipe for FRR
by Amol Lad 10 Aug '21

10 Aug '21

Hi, Please advise if there is any Yocto recipe for FRRouting? If not, how to go about creating one for FRR? Yocto Recipe for FRR will hugely simplify integrating FRR in Yocto based embedded linux distributions. So please advise if there are any plans to develop this recipe? Thanks Amol ________________________________ The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).

4 10

Binding two IP addresses to bgpd
by Matt Riffle 04 Mar '21

04 Mar '21

Apologies if I’m missing something easy here — I think I’ve looked at this for too long. I want my bgpd process to listen to 2 IP addresses — one IPv4 and one IPv6. I cannot find a syntax that allows this to happen. I can listen to one or the other. I really don’t want to run two bgpd processes to accomplish it. (I could let it bind to the default 0.0.0.0 / :: and use a firewall, but, again, I’d rather just bind to the two addresses I need it on, if possible.) Thanks, -Matt

6 6

nhrpd event manager
by Joe Maimon 01 Mar '21

01 Mar '21

I have successfully gotten frr,nhrpd,strongswan,charon all running on another system for a dmvpn application. I am currently trying to do another setup, but without vpn/ipsec, just nhrp/gre. Its not working out well, debug logs show Netlink: Received msg_type 28 which if I recall correctly suggests that the neighbor entry isnt being installed correctly, trying it as root worked even less. So while poking around, I see there is an entire event manager unix sock structure. Perhaps I can parse that and do it myself? However, this is as far as I got. I am interacting with it via shell script. Mar 15 08:11:35 debian67 nhrpd[20977]: evmgr: sending event authorize-binding Mar 15 08:11:35 debian67 nhrpd[20977]: Send Registration-Reply(4) 192.168.241.129 -> 192.168.241.130 Mar 15 08:11:35 debian67 nhrpd[20977]: PACKET: Send 45.77.146.76 -> 209.51.164.27 Mar 15 08:11:35 debian67 nhrpd[20977]: evmgr: msg: eventid=214 Mar 15 08:11:35 debian67 nhrpd[20977]: evmgr: msg: result=accept Mar 15 08:11:35 debian67 nhrpd[20977]: evmgr: msg: Mar 15 08:11:35 debian67 nhrpd[20977]: evmgr: received: eventid=214 result= Mar 15 08:11:45 debian67 nhrpd[20977]: cache: t67 192.168.241.130: timeout Mar 15 08:11:46 debian67 nhrpd[20977]: Netlink: Received msg_type 28, msg_flags 0 I have looked at the source and I cant seem to convince the function to recognize that result should be "accept". Any advice appreciated. Joe For the interested, the below is the fledgling script #!/bin/bash PROGNAME=`basename $0` VERSION="0.0.1" usage() { echo "Usage: $PROGNAME -s nhrp-sock [-i interface-name] [-u user] [-g group] " echo "" echo "-s nhrp-sock file" echo "-i interface-name to execute on, may be repeated multiple times" echo "-u user to own the sock" echo "-g group to own the sock" exit 1 } SOCK="/var/run/frr/nhrp.sock" USER="frr" GROUP="frr" j=0 while getopts s:i:u:g: opt; do case "$opt" in s) SOCK="$OPTARG" ;; i) INTARR[((j++))]="$OPTARG" ;; u) USER="$OPTARG" ;; g) GROUP="$OPTARG" ;; esac; done coproc socat - UNIX-LISTEN:$SOCK,unlink-early,setuid-early=$USER || exit 1 OLDIFS="$IFS" while read -r S; do if [[ "$S" == "" ]]; then if [[ "$EVID" != "" ]]; then echo -e "eventid=$EVID\nresult=accept\n"; fi unset EVID unset EVINT continue; fi IFS="${IFS}=" SA=($S) IFS="$OLDIFS" case "${SA[0]}" in eventid) EVID="${SA[1]}" ;; interface) EVINT="${SA[1]}" esac done <&"${COPROC[0]}" >&"${COPROC[1]}" kill "$COPROC_PID"

2 3

ip nhrp map multicast
by Amol Lad 11 Dec '20

11 Dec '20

Hi, I'm keen on adding this support so DMVPN can work over OSPF/EIGRP. The issue is described in https://github.com/FRRouting/frr/issues/6276 If someone can tell what actually is the issue and a high level overview of what needs to be done then I can add this support. Amol

4 4

ospfd crashes when deleting a route-map
by Amol Lad 27 Nov '20

27 Nov '20

Hi, I'm using FRR 7.4 (OpenWrt). I'm not using the integrated-config (i.e. each daemon has it's own config file). Below sequence of commands crashes ospfd. Please advise if any more useful debug information I can provide regarding this issue. === CRASH-1 [this happens after "no route-map SET_MED permit 10" command is executed] OSPF[9944]: Received signal 4 at 1772832797 (si_addr 0xffffffffb6f206d0); aborting... OSPF[9944]: in thread vtysh_read scheduled from lib/vty.c:2675 FRR(config)# log syslog FRR(config)# debug ospf zebra FRR(config)# debug ospf event FRR(config)# debug ospf ism FRR(config)# do show running-config Building configuration... Current configuration: ! frr version 7.4 frr defaults traditional log syslog hostname FRR ! line vty ! End FRR(config)# route-map SET_MED permit 10 FRR(config-route-map)# set metric 3333 FRR(config-route-map)# exit FRR(config)# no route-map SET_MED permit 10 (** console hangs here for very long time and finally shows below error **) vtysh: error reading from ospfd: No such file or directory (2)Warning: closing connection to ospfd because of an I/O error! FRR(config)# === CRASH-2 [this happens after "set metric 1234" command is executed] ripd[9945]: route_set_metric_compile: Metric specified: 1234 is greater than RIP_METRIC_INFINITY, using INFINITY instead ripngd[9948]: route_set_metric_compile: Metric specified: 1234 is being converted into METRIC_INFINITY OSPF[9952]: Received signal 11 at 1772834027 (si_addr 0x8); aborting... OSPF[9952]: in thread vtysh_read scheduled from lib/vty.c:2675 FRR(config)# log syslog FRR(config)# debug ospf ism FRR(config)# debug ospf event FRR(config)# debug ospf zebra FRR(config)# do show running-config Building configuration... Current configuration: ! frr version 7.4 frr defaults traditional log syslog hostname FRR ! line vty ! End FRR(config)# route-map SET_MED permit 10 FRR(config-route-map)# set metric 1234 (** console hangs here for very long time and finally shows below error **) vtysh: error reading from ospfd: No such file or directory (2)Warning: closing connection to ospfd because of an I/O error! AprisaLTE(config-route-map)# == root@AprisaLTE:/# cat /etc/frr/daemons # The watchfrr and zebra daemons are always started. # bgpd=yes ospfd=yes #ospfd_instances=1,20 ospf6d=yes ripd=yes ripngd=yes isisd=no pimd=no ldpd=no nhrpd=yes eigrpd=yes babeld=no sharpd=no pbrd=no bfdd=no fabricd=no vrrpd=no # # If this option is set the /etc/init.d/frr script automatically loads # the config via "vtysh -b" when the servers are started. # Check /etc/pam.d/frr if you intend to use "vtysh"! # vtysh_enable=yes zebra_options=" -A 127.0.0.1 -s 90000000 -f /opt/conf/openwrt/etc/frr/zebra.conf" bgpd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/bgpd.conf" ospfd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/ospfd.conf" ospf6d_options=" -A ::1 -f /opt/conf/openwrt/etc/frr/ospf6d.conf" ripd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/ripd.conf" ripngd_options=" -A ::1 -f /opt/conf/openwrt/etc/frr/ripngd.conf" isisd_options=" -A 127.0.0.1" pimd_options=" -A 127.0.0.1" ldpd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/ldpd.conf" nhrpd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/nhrpd.conf" eigrpd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/eigrpd.conf" babeld_options=" -A 127.0.0.1" sharpd_options=" -A 127.0.0.1" pbrd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/pbrd.conf" staticd_options="-A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/staticd.conf" bfdd_options=" -A 127.0.0.1 -f /opt/conf/openwrt/etc/frr/bfdd.conf" fabricd_options="-A 127.0.0.1" vrrpd_options=" -A 127.0.0.1" # The list of daemons to watch is automatically generated by the init script. #watchfrr_options="" # for debugging purposes, you can specify a "wrap" command to start instead # of starting the daemon directly, e.g. to use valgrind on ospfd: # ospfd_wrap="/usr/bin/valgrind" # or you can use "all_wrap" for all daemons, e.g. to use perf record: # all_wrap="/usr/bin/perf record --call-graph -" # the normal daemon command is added to this at the end.

2 7

FRRouting and MPLS
by Olivier CALVANO 23 Nov '20

23 Nov '20

Hello, I have just installed FRR for the first time on a Linux CentOS 8 distribution. I am therefore just starting out. I am gradually reading the forums but there is a lot of information. FRR manages without worries the BGP and the ISIS which I use regularly on my cisco routers. I am now trying to find out if FRR can integrate more deeply into my network, particularly at the MPLS level. as I understood it is in the Kernel that this is done and not in FRR, but is there a way to integrate VRF IP VPN? and the creation of a VLAN type subinterface directly in FRR? Then last question: Is there an implementation of the Cisco EoMPLS equivalent in FRR? (xconnect encapsultation mpls) thank you Olivier

2 1

Re: [FROG] ipv6 nd managed-config-flag ignored?
by Thomas Pircher 23 Nov '20

23 Nov '20

For the archive. Cumulus support was able to help me on this issue. The problem was that I'm using VRRP on top of the VLAN interface, so the IPv6 ND settings had to be configured on the VRRP interface, and not on the underlying VLAN interface: | interface vrrp6-63-3 | ipv6 nd managed-config-flag | ipv6 nd ra-interval 5 | no ipv6 nd suppress-ra So once this was set, everything seems to work fine. I hope the ifindex (63) in the interface name won't change, but that is a separate issue... Thanks, Thomas

1 0

Snmp and agentx
by Matthieu 22 Nov '20

22 Nov '20

Hi, It is the first time that I post on the mailing list, excuse me if it is the wrong place to ask this. I can’t get SNMP to work with SNMP, I have followed this documentation : http://docs.frrouting.org/en/latest/snmp.html <http://docs.frrouting.org/en/latest/snmp.html> 1. Here is my setup: Debian GNU/Linux 9 dpkg -l | grep frr ii frr 7.5-0~deb9 amd64 FRRouting suite of internet protocols (BGP, OSPF, IS-IS, ...) ii frr-pythontools 7.5-0~deb9 all FRRouting suite - Python tools ii frr-snmp 7.5-0~deb9 amd64 FRRouting suite - SNMP support I have used the version from the repo and added frr-snmp (not compiled from source). 2. Here is my /etc/snmp/snmpd.conf: com2sec readonly default **** group MyROGroup v2c readonly view all included .1 80 access MyROGroup "" any noauth exact all none none #Distro Detection extend .1.3.6.1.4.1.2021.7890.1 distro /usr/bin/distro dontLogTCPWrappersConnects true # # This is the default view view all included .1 80 # # # Remove ipRouteTable from view view all excluded .1.3.6.1.2.1.4.21 # # # Remove ipNetToMediaTable from view view all excluded .1.3.6.1.2.1.4.22 # # # Remove ipNetToPhysicalPhysAddress from view view all excluded .1.3.6.1.2.1.4.35 # # Remove ipCidrRouteTable from view view all excluded .1.3.6.1.2.1.4.24 # # # Optionally protect SNMP private/secret values view all excluded .1.3.6.1.6.3.15 view all excluded .1.3.6.1.6.3.16 view all excluded .1.3.6.1.6.3.18 master agentx 3. Here is my /etc/snmp/zebra.conf file: com2sec readonly default **** group MyROGroup v1 readonly view all included .1 80 access MyROGroup "" any noauth exact all none none master agentx 4. I have modified this file /etc/frr/daemons in order to enable SNMP support for each daemon: zebra_options=" -A 127.0.0.1 -s 90000000 -M snmp" bgpd_options=" -A 127.0.0.1 -M snmp" ospfd_options=" -A 127.0.0.1 -M snmp" ospf6d_options=" -A ::1 -M snmp" 5. Each of the routing process have agentx enabled in the config: zebra, bgpd, ospfd, ospf6d. But Frr is complaining in the log: tail -f /var/log/frr/frr.log Nov 22 12:19:12 border3 zebra[11311]: [EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]): Nov 22 12:19:12 border3 ospfd[11323]: [EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]): Nov 22 12:19:12 border3 bgpd[11316]: [EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]): Nov 22 12:19:14 border3 ospf6d[11326]: [EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]): SNMP is working fine for the global system (CPU, disk space, etc…) but not for the specific OID about routing processes. Do you know what I am doing wrong ? Thank you

1 0

question on OSPF over GRE support and possible limitations
by Andrea di donato 19 Nov '20

19 Nov '20

Hello all, I haven't tested FRR yet but was wondering whether FRR is able to form an OSPF adjacency over a GRE tunnel. I was also wondering if there was any limitation should the GRE tunnel dst ip address be resolved by a BGP prefix rather than by an IGP prefix or a static route. I am saying this as, for instance, Cisco IOSXR had and possibly still has that kind of limitation where the ospf process couldn't perform recursive lookups as such in order to then send helloes and flood LSAs ... Cheers Andrea Di Donato -- (?P<whatever>.*IE) No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced.

1 0

Re: [FROG] ipv6 nd managed-config-flag ignored?
by Donald Sharp 17 Nov '20

17 Nov '20

Thomas - >From a very quick code inspection it sure looks like we set the flag. I even went and looked at the 4.0+cl3u17 code and it's identical to master. I would suggest you open a case with Cumulus Support to get it looked at. donald On Tue, Nov 17, 2020 at 5:48 AM Thomas Pircher via frog <frog(a)lists.frrouting.org> wrote: > > > > > ---------- Forwarded message ---------- > From: Thomas Pircher <thp.frrouting(a)p5r.uk> > To: frog(a)lists.frrouting.org > Cc: > Bcc: > Date: Tue, 17 Nov 2020 10:47:02 +0000 > Subject: ipv6 nd managed-config-flag ignored? > Hi, > > I'm using frr version 4.0+cl3u17 on a Cumulus router. I'm having > troubles setting the managed-config-flag for RA packets. I have this in > my configuration file for the VLAN interface I'd like to configure with > the managed-config-flag on: > > | interface vlan124 > | vrrp 3 > | vrrp 3 ipv6 fd00:4d56:414c:6000::1 > | vrrp 3 priority 150 > | ipv6 nd managed-config-flag > > > But when I sniff the outgoing packets on the interface, I get "Flags [none]" in tcpdump: > > | # tcpdump -lnn -i vlan124 -vvvv -ttt icmp6 and 'ip6[40] = 134' > | tcpdump: listening on vlan124, link-type EN10MB (Ethernet), capture size 262144 bytes > | 00:00:00.000000 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::c981:f4f7:7f26:a79b > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 24 > | hop limit 64, Flags [none], pref medium, router lifetime 48s, reachable time 0ms, retrans timer 0ms > | source link-address option (1), length 8 (1): 00:00:5e:00:02:03 > | 0x0000: 0000 5e00 0203 > > Is there something I'm doing wrong? Any help is appreciated. > > Thanks, > Thomas > > > > > ---------- Forwarded message ---------- > From: Thomas Pircher via frog <frog(a)lists.frrouting.org> > To: frog(a)lists.frrouting.org > Cc: > Bcc: > Date: Tue, 17 Nov 2020 10:47:02 +0000 > Subject: [FROG] ipv6 nd managed-config-flag ignored? > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog

2 1