list members,
i am new to the list, and trying to get FRR working in my home network.
i have an old instance of quagga working and want to update to a newer
OS and routing instance on my router/gateway. i know there is room for
improvement in how i am doing things now, but getting to a current
version and have that working is the objective. making improvements
would be subsequent to having a working routing platform.
i have what i am told is an ebgp setup, where my router in in AS 65535
and my servers are in AS 64512. my servers announce several routes
depending on what services they are running, and the FRR instance does
get those announcements. if i go into vtysh and run a "sh ip route" i
see all of the routes i am expecting. but, from a plain OS command
line, "ip route" only shows the routes associated with the interfaces on
the box. none of the announced/advertised routes from the servers show up.
in essence, the routing deamon is getting the routes, but somehow the OS
is not getting them. is there some config item i am missing or an OS
level setting that i have to adjust to get things working as i expect them?
FRR config:
frr version 10.3
frr defaults traditional
hostname router
log syslog errors
service advanced-vty
service password-encryption
!
ip prefix-list SSL-Tap seq 5 permit 192.168.184.0/24 le 32
ip prefix-list SSL-Tun seq 5 permit 192.168.185.0/24 le 32
ip prefix-list Virtuals seq 5 permit 192.168.251.0/24 le 32
ip prefix-list VIPs seq 5 permit 192.168.252.0/24 le 32
ip prefix-list Storage seq 5 permit 192.168.253.0/24 le 32
ip prefix-list Anycast seq 5 permit 192.168.254.0/24 le 32
ip prefix-list IPSec seq 5 permit 192.168.152.0/24 le 32
!
route-map RM_Set_Src permit 10
set src 192.168.248.254
exit
!
route-map VPN_in permit 10
match ip address prefix-list IPSec
exit
!
route-map VPN_in permit 20
match ip address prefix-list SSL-Tap
exit
!
route-map VPN_in permit 30
match ip address prefix-list SSL-Tap
exit
!
interface bond0
no link-detect
exit
!
interface database
ip address 192.168.120.3/32
no link-detect
exit
!
interface enp3s0f0
no link-detect
exit
!
interface enp3s0f1
no link-detect
exit
!
interface enp4s0f0
no link-detect
exit
!
interface enp4s0f1
no link-detect
exit
!
interface imap
ip address 192.168.120.5/32
no link-detect
exit
!
interface kadmin
ip address 192.168.120.10/32
no link-detect
exit
!
interface ldap
ip address 192.168.120.8/32
no link-detect
exit
!
interface postgres
ip address 192.168.120.12/32
no link-detect
exit
!
interface privoxy
ip address 192.168.120.13/32
no link-detect
exit
!
interface proxy
ip address 192.168.120.1/32
no link-detect
exit
!
interface redis
ip address 192.168.120.11/32
no link-detect
exit
!
interface relp
ip address 192.168.120.4/32
no link-detect
exit
!
interface smtp
ip address 192.168.120.6/32
no link-detect
exit
!
interface submission
ip address 192.168.120.7/32
no link-detect
exit
!
interface vlan1
ip address 192.168.1.254/24
exit
!
interface vlan24
ip address 192.168.24.254/24
exit
!
interface vlan56
ip address 192.168.56.254/24
exit
!
interface vlan57
ip address 192.168.57.254/24
exit
!
interface vlan88
ip address 192.168.88.254/24
exit
!
interface vlan120
ip address 192.168.120.254/24
exit
!
interface vlan216
ip address 192.168.216.254/24
exit
!
interface vlan248
ip address 192.168.248.254/24
exit
!
interface www
ip address 192.168.120.2/32
no link-detect
exit
!
router bgp 65535
bgp router-id 192.168.248.254
no bgp ebgp-requires-policy
timers bgp 4 16
neighbor 192.168.88.1 remote-as 64512
neighbor 192.168.88.1 description server1
neighbor 192.168.88.1 ttl-security hops 1
neighbor 192.168.88.2 remote-as 64512
neighbor 192.168.88.2 description server2
neighbor 192.168.88.2 ttl-security hops 1
neighbor 192.168.88.3 remote-as 64512
neighbor 192.168.88.3 description nas
neighbor 192.168.88.3 ttl-security hops 1
neighbor 192.168.88.4 remote-as 64512
neighbor 192.168.88.4 description hypervisor
neighbor 192.168.88.4 ttl-security hops 1
neighbor 192.168.88.5 remote-as 64512
neighbor 192.168.88.5 description vpn
neighbor 192.168.88.5 ttl-security hops 1
neighbor 192.168.88.8 remote-as 64512
neighbor 192.168.88.8 description server3
neighbor 192.168.88.8 ttl-security hops 1
!
address-family ipv4 unicast
network 192.168.1.0/24
network 192.168.24.0/24
network 192.168.56.0/24
network 192.168.57.0/24
network 192.168.88.0/24
network 192.168.120.0/24
network 192.168.216.0/24
network 192.168.248.0/24
neighbor 192.168.88.1 next-hop-self
neighbor 192.168.88.1 soft-reconfiguration inbound
neighbor 192.168.88.1 prefix-list Anycast in
neighbor 192.168.88.2 next-hop-self
neighbor 192.168.88.2 soft-reconfiguration inbound
neighbor 192.168.88.2 prefix-list Anycast in
neighbor 192.168.88.3 next-hop-self
neighbor 192.168.88.3 soft-reconfiguration inbound
neighbor 192.168.88.3 prefix-list Storage in
neighbor 192.168.88.4 next-hop-self
neighbor 192.168.88.4 soft-reconfiguration inbound
neighbor 192.168.88.4 prefix-list Virtuals in
neighbor 192.168.88.5 next-hop-self
neighbor 192.168.88.5 soft-reconfiguration inbound
neighbor 192.168.88.5 route-map VPN_in in
neighbor 192.168.88.8 next-hop-self
neighbor 192.168.88.8 soft-reconfiguration inbound
neighbor 192.168.88.8 prefix-list Anycast in
maximum-paths 4
maximum-paths ibgp 4
exit-address-family
exit
!
access-list 50 seq 5 permit 192.168.88.1
access-list 50 seq 10 permit 192.168.88.2
access-list 50 seq 15 permit 192.168.88.3
access-list 50 seq 20 permit 192.168.88.4
access-list 50 seq 25 permit 192.168.88.5
access-list 50 seq 30 permit 192.168.88.8
!
ip protocol bgp route-map rm_Set_Src
!
ip routing scheme expected:
default via 192.168.40.1 dev enp7s0
192.168.1.0/24 dev bond0.1 proto kernel scope link src 192.168.1.254
192.168.24.0/24 dev bond0.24 proto kernel scope link src 192.168.24.254
192.168.40.0/24 dev enp7s0 proto kernel scope link src 192.168.40.149
192.168.56.0/24 dev bond0.56 proto kernel scope link src 192.168.56.254
192.168.57.0/24 dev bond0.57 proto kernel scope link src 192.168.57.254
192.168.88.0/24 dev bond0.88 proto kernel scope link src 192.168.88.254
192.168.120.0/24 dev bond0.120 proto kernel scope link src 192.168.120.254
192.168.152.0/24 via 192.168.88.5 dev bond0.88 proto zebra metric 20
192.168.184.0/24 via 192.168.88.5 dev bond0.88 proto zebra metric 20
192.168.185.0/24 via 192.168.88.5 dev bond0.88 proto zebra metric 20
192.168.216.0/24 dev bond0.216 proto kernel scope link src 192.168.216.254
192.168.248.0/24 dev bond0.248 proto kernel scope link src 192.168.248.254
192.168.253.1 via 192.168.88.3 dev bond0.88 proto zebra metric 20
192.168.253.2 via 192.168.88.3 dev bond0.88 proto zebra metric 20
192.168.253.3 via 192.168.88.3 dev bond0.88 proto zebra metric 20
192.168.254.1 proto zebra metric 20
nexthop via 192.168.88.2 dev bond0.88 weight 1
nexthop via 192.168.88.1 dev bond0.88 weight 1
nexthop via 192.168.88.8 dev bond0.88 weight 1
192.168.254.2 proto zebra metric 20
nexthop via 192.168.88.2 dev bond0.88 weight 1
nexthop via 192.168.88.1 dev bond0.88 weight 1
nexthop via 192.168.88.8 dev bond0.88 weight 1
192.168.254.3 proto zebra metric 20
nexthop via 192.168.88.2 dev bond0.88 weight 1
nexthop via 192.168.88.1 dev bond0.88 weight 1
nexthop via 192.168.88.8 dev bond0.88 weight 1
192.168.254.4 proto zebra metric 20
nexthop via 192.168.88.2 dev bond0.88 weight 1
nexthop via 192.168.88.1 dev bond0.88 weight 1
nexthop via 192.168.88.8 dev bond0.88 weight 1
192.168.254.5 proto zebra metric 20
nexthop via 192.168.88.2 dev bond0.88 weight 1
nexthop via 192.168.88.1 dev bond0.88 weight 1
nexthop via 192.168.88.8 dev bond0.88 weight 1
192.168.254.6 proto zebra metric 20
nexthop via 192.168.88.2 dev bond0.88 weight 1
nexthop via 192.168.88.1 dev bond0.88 weight 1
nexthop via 192.168.88.8 dev bond0.88 weight 1
any help or insight into how i messed things up would be appreciated.
thanks in advance,
brendan kearney
