April 2020 - frog - lists.frrouting.org

FRR 7.2 or 7.3
by Sébastien 65 15 Apr '20

15 Apr '20

Hi, I plan to replace a production router with Quagga... Which version of FRR (7.2.1 or 7.3) you advise me to go into production (BGP/OSPF ipv4 + ipv6 full feed) ? I'm going to use Debian with FRR. Thanks !

2 2

how to trigger a graceful restart for a bgp session
by Xinyong Wang 13 Apr '20

13 Apr '20

hi, if we just did `systemctl restart frr`, the bgpd process will be stopped by `kill -2`, and it would send cease/peer de-config notification to its peer. its peer will flush the routes insteading of make them stale. if we did `neighbor xxxxx shutdown`,then `no neighbor xxxxxx shutdown` via vtysh, it would send cease/administrative shutdown notification. graceful restart did not work too. Now, we have changed frrcommon.sh by 's/kill -2/kill -9/g', when bgpd is killed by `kill -9`, it would not send any notifications, and this time, graceful restart functionality works, its peer makes the routes be stale and forwarding is perserverd during frr restarting. however, we think this approach is ugly. So can anyone tell us what is the corrent approach to restart bgp session gracefully. we have to restart bgp session for upgrading to a new version or changing some parameters, etc. thanks! best regards, Xinyong

2 3

FRR Adding IPv6 Routes
by Tran (US), Katherine K 09 Apr '20

09 Apr '20

Hello, I am trying to switch from Quagga to FRR, but I am having issues adding distributed IPv6 routes. Although the IPv6 routes get added, they keep toggling between being added and removed. This did not occur while using Quagga. A difference between the added IPv6 routes of Quagga and FRR was that (1) the Quagga routes are by protocol zebra and (2) the FRR routes are by protocol 186, which I deduced to be bgpd. This can be seen by initiating the command "ip -6 ro sh". Quagga ---------- 2001:XXXX:X:X::/64 via fe80::1:2 dev eth0 proto zebra metric 1024 pref medium FRR ----- 2001:XXXX:X:X::/64 via fe80::1:2 dev eth0 proto 186 metric 20 pref medium I have a simple BGP configuration using Autonomous System Border Router (ASBR). I am running the daemons (zebra, staticd, bgpd) through the all-encompassing config file frr.conf, and I have also tried separating each daemon out to a separate config file and running them separately. I used the same commands from the Quagga confile files, and I added the additional staticd commands. I've looked at all the generated log files, and I can't seem to find anything substantial to investigation. Would anyone have an idea why these IPv6 routes keep toggling from being added and removed? Any additional suggestions on troubleshooting steps? Thank you, Katherine

5 13

IS-IS Complains When Loopback Interface is in Play
by Mark Tinka 09 Apr '20

09 Apr '20

Hi all. When I add my Loopback interface to isisd.conf and restart it, it throws the below: 2020/04/07 14:35:44 errors: ISIS: libyang: Missing required element "area-tag" in "isis". (/frr-interface:lib/interface[name='lo0'][vrf='default']/frr-isisd:isis) 2020/04/07 14:35:44 warnings: ISIS: [EC 100663337] nb_candidate_commit_prepare: failed to validate candidate configuration % Configuration failed: validation error. A bit of Googling indicated that "router isis 1" would need to come first in the configuration, since some previous versions of FRR processed the files line by line, and not atomically. But even after doing that, I still get the same error; but get this, ONLY when I add "interface lo0" to the configuration. Without that, and with just the physical interface in the configuration, IS-IS starts up fine. Any thoughts? System FRR 7.3 on FreeBSD-12.1. Thanks. Mark.

1 1

v6 Route Replace semantics
by Donald Sharp 08 Apr '20

08 Apr '20

All - We recently introduced, into master, a new cli switch for zebra on linux `--v6-rr-semantics`. This was allow zebra to take advantage of the linux kernel getting v6 route replace semantics that is coming soon in the 4.18 linux kernel. So if you are on the bleeding edge of linux kernels and FRR you can start to take advantage of this new feature. What are Route Replace semantics you ask? Suppose we have a v6 route with 2 nexthops: S>* 4:6:7::/64 [1/0] via 1:2:3::4, enp0s3, 00:00:02 via 1:2:8::8, enp0s8, 00:00:02 Now suppose we remove a nexthop: robot# conf t robot(config)# no ipv6 route 5:7:9::/78 1:2:8::9 robot(config)# end robot# show ipv6 route [snip] S>* 5:7:9::/78 [1/0] via 1:2:3::4, enp0s3, 00:01:04 Let's look at the netlink notifications for this event: [ROUTE]5:7:9::/78 proto static metric 20 <----------- From creation of the 2x ecmp for 5:7:9::/78 nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]Deleted 5:7:9::/78 proto static metric 20 <---- We delete the route nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]5:7:9::/78 via 1:2:3::4 dev enp0s3 proto static metric 20 pref medium <----- We add it back in. In order to get the routes right in the kernel we had to delete the route first and then add it back in. Exposing a small window of packets being dropped while the route is fixed in the fib. Route Replace semantics tells the linux kernel to just replace the nexthops for the route. New packets coming in would immediately start using the new ecmp nexthop group path: [ROUTE]5:7:9::/78 proto static metric 20 nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]5:7:9::/78 via 1:2:3::4 dev enp0s3 proto static metric 20 pref medium thanks! donald

2 1

IS-IS HMAC-MD5 Authentication Not Working
by Mark Tinka 08 Apr '20

08 Apr '20

Hi all. So I've been trying to get IS-IS to talk to a Cisco IOS XE box with HMAC-MD5 authentication, with no luck. I created an MD5 hash of the clear-text password, and also tried it with the clear-text password, and neither work. Cisco says the neighbor has the wrong password. There is an example for doing this with authentication at the bottom of http://docs.frrouting.org/en/latest/isisd.html , but the actual configuration example does not say anything about authentication. Thoughts? Mark.

4 6

Re: [FROG] IS-IS HMAC-MD5 Authentication Not Working
by Mark Tinka 08 Apr '20

08 Apr '20

On 8/Apr/20 00:21, Chriztoffer Hansen wrote: > Regarding documentation... Even the current FRR documentation is in > certain areas lacking (known issue). Any and all PR's for proving > improving the existing FRR documentation is welcomed by the developers > (to my knowledge of what I can remember) I am very happy to support the improvement in the documentation for IS-IS in FRR, as soon as I can get it to start working :-). At this stage, I am struggling to find out which combination of commands work, when, where and how. So having access to those who wrote the code might help, or anyone who's succeeded in doing this but is lurking somewhere. Mark.

1 0

Re: [FROG] Static route with BFD not supported?
by Soma Kelemen 02 Apr '20

02 Apr '20

Hi Tamas, As I see it is on the feature requests list https://github.com/FRRouting/frr/wiki/Feature-Requests and not implemented yet. Br, Soma On Fri, Apr 3, 2020 at 12:09 AM Tamás Kelemen via frog < frog(a)lists.frrouting.org> wrote: > > > > ---------- Forwarded message ---------- > From: "Tamás Kelemen" <tamas.kelemen(a)ericsson.com> > To: "frog(a)lists.frrouting.org" <frog(a)lists.frrouting.org> > Cc: > Bcc: > Date: Fri, 20 Mar 2020 12:31:53 +0000 > Subject: Static route with BFD not supported? > > Hi > > > > Is it possible to disable static routes if BFD session is down to the > gateway address? > > > > Thanks in advice > > > > BR, > > Tamas > > > > ---------- Forwarded message ---------- > From: "Tamás Kelemen via frog" <frog(a)lists.frrouting.org> > To: "frog(a)lists.frrouting.org" <frog(a)lists.frrouting.org> > Cc: > Bcc: > Date: Thu, 02 Apr 2020 15:09:09 -0700 (PDT) > Subject: [FROG] Static route with BFD not supported? > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog >

1 0