- frog - lists.frrouting.org

What 'ge' 'le' really means ?
by Simon Jones 20 Feb '20

20 Feb '20

Hi all, In this command: > gyw-229(config)# ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/24 > ge 24 > % Invalid prefix range for 192.18.8.0/24, make sure: len < ge-value <= > le-value > gyw-229(config)# ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/24 > ge 25 we see 'ge' means greater. But in doc: > ge command specifies prefix length. The prefix list will be applied if the > prefix length is greater than or equal to the ge prefix length So what's 'ge' really means? And how to set equal command? Set equal command using 'ge xxx le xxx' before, but if 'ge' means greater, how to set? Use this command? > ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/32 ---- Simon Jones

3 5

Fwd: trying to find example babeld.conf for use with FRR and Wireguard
by brian mullan 16 Feb '20

16 Feb '20

I have FRR and BGP working well with WireGuard but I'd really like to try Babled. However, I've searched the internet for a couple days now and the only babeld.conf files I've found are for openwrt use. Can anyone point me to an example babeld.conf for FRR that might work with WireGuard? thanks for any information or links. Brian

3 2

Changing BGP route map mid-session causes zebra to spin out of control
by Rudy Rucker 12 Feb '20

12 Feb '20

TL;DR: Having a '0.0.0.0/0 le 29' in a BGP prefix-list on a BGP session that has a full table can freak out zebra. If I go in and change a route-map, the box load goes to 100+ and starts dropping packets. The route-map had this prefix-list line ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 29 that seemed to break things, but changing it to: ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 24 fixes it. Repeatable: launch FRR with route-map COGENT-IN deny 10 match ip address prefix-list AS32329-ip4 route-map COGENT-IN permit 20 match ip address prefix-list COGENT-TEST-ONE-BLOCK set local-preference 100 set weight 101 Wait a few minutes, then change to route-map like this: orange(config)# route-map COGENT-IN permit 20 orange(config-route-map)# match ip address prefix-list DEFAULT-IN-ip4 orange(config-route-map)# set local-preference 100 orange(config-route-map)# set weight 101 And then load goes over 100 Here are the lists.... ip prefix-list COGENT-TEST-ONE-BLOCK seq 10 permit 38.0.0.0/8 le 24 ip prefix-list COGENT-TEST-ONE-BLOCK seq 20 deny any ip prefix-list DEFAULT-IN-ip4 seq 11 deny 10.0.0.0/8 le 32 ip prefix-list DEFAULT-IN-ip4 seq 12 deny 172.16.0.0/12 le 32 ip prefix-list DEFAULT-IN-ip4 seq 13 deny 192.168.0.0/16 le 32 ip prefix-list DEFAULT-IN-ip4 seq 14 deny 169.254.0.0/16 le 32 ip prefix-list DEFAULT-IN-ip4 seq 15 deny 127.0.0.0/8 le 32 ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 29 Output of truss on 'zebra' (I don't claim to really understand this output, other than reading 'Resource temporarily unavailable'. # truss -p 919 seteuid(0xa8) = 0 (0x0) read(6,"\M-H\0\^E\^B\^F\0\0\0B\M^@\0\0\a"...,1192) = 200 (0xc8) seteuid(0x0) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163188,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A",64) = 1 (0x1) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) seteuid(0xa8) = 0 (0x0) seteuid(0x0) = 0 (0x0) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163263,s=34.122484,in=5,out=7 }) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163279,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163294,s=34.122484,in=5,out=7 }) = 0 (0x0) seteuid(0xa8) = 0 (0x0) read(6,"\M-H\0\^E\^A\^D\0\0\0C\M^@\0\0\a"...,1192) = 200 (0xc8) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163335,s=34.122484,in=5,out=7 }) = 0 (0x0) seteuid(0x0) = 0 (0x0) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A\^A",64) = 2 (0x2) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163391,s=34.122484,in=5,out=7 }) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163421,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163444,s=34.122484,in=5,out=7 }) = 0 (0x0) read(6,"\M-H\0\^E\^B\^F\0\0\0B\M^@\0\0\a"...,1192) = 200 (0xc8) seteuid(0xa8) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) seteuid(0x0) = 0 (0x0) getrusage(RUSAGE_THREAD,{ u=27.163492,s=34.122484,in=5,out=7 }) = 0 (0x0) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A\^A",64) = 2 (0x2) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) I'm not positive I figured this out... maybe it is late at night and traffic levels are down. Thanks, Rudy

1 0

Re: [FROG] Installing FRR on Ubuntu 18.04
by ian.2.oakley＠bt.com 10 Feb '20

10 Feb '20

Hi Nuno, I did that, and after a bit of sudo magic it's installed. Thank you. Regards, Ian -----Original Message----- From: Nuno Vieira <nuno(a)hashpower.pt> Sent: 10 February 2020 11:53 To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 this below on a single line (just copy & paste properly) echo "deb https://deb.frrouting.org/frr bionic frr-stable" > /etc/apt/sources.list.d/frr.list Nuno Vieira # hashpower - datacenter and it services Leiria | Portugal p: +351308814400 e: nuno(a)hashpower.pt w: https://hashpower.pt ----- Original Message ----- > From: "ian 2 oakley" <ian.2.oakley(a)bt.com> > To: "Nuno Vieira" <nuno(a)hashpower.pt> > Cc: "frog" <frog(a)lists.frrouting.org> > Sent: Monday, 10 February, 2020 11:27:11 > Subject: RE: [FROG] Installing FRR on Ubuntu 18.04 > Hi Nuno, > > How would I alter the > > echo deb https://deb.frrouting.org/frr $(lsb_release -s -c) $FRRVER | > sudo tee -a /etc/apt/sources.list.d/frr.list > > command that currently produces > > deb https://deb.frrouting.org/frr bionic > > so that it produces > > deb https://deb.frrouting.org/frr bionic frr-stable > > or do I just manually rename the entries resulting from > > more /etc/apt/sources.list.d/frr.list > > Thanks in advance, > Ian > > -----Original Message----- > From: Nuno Vieira <nuno(a)hashpower.pt> > Sent: 10 February 2020 11:14 > To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> > Cc: tim(a)provu.co.uk; frog <frog(a)lists.frrouting.org> > Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 > > yo > > change that to: > > deb https://deb.frrouting.org/frr bionic frr-stable > > it will work then. > > cheers > > Nuno Vieira > > # hashpower - datacenter and it services Leiria | Portugal > > p: +351308814400 > e: nuno(a)hashpower.pt > w: https://hashpower.pt > > ----- Original Message ----- >> From: "ian 2 oakley" <ian.2.oakley(a)bt.com> >> To: tim(a)provu.co.uk >> Cc: "frog" <frog(a)lists.frrouting.org> >> Sent: Monday, 10 February, 2020 10:27:09 >> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 > >> Hi Tim, >> >> Did that, got this: >> >> deb https://deb.frrouting.org/frr bionic >> >> which doesn't seem wrong, but evidently it is. >> >> Hope that helps, >> Ian >> >> -----Original Message----- >> From: Tim Bray <tim(a)provu.co.uk> >> Sent: 07 February 2020 16:06 >> To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> >> Cc: frog(a)lists.frrouting.org >> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 >> >> type >> >> more /etc/apt/sources.list.d/frr.list >> >> and copy and paste to email. So we can see what the problem is. >> >> Tim >> >> On 07/02/2020 15:11, ian.2.oakley(a)bt.com wrote: >>> E: Malformed entry 1 in list file /etc/apt/sources.list.d/frr.list >>> (Component) >>> E: The list of sources could not be read. >> _______________________________________________ >> frog mailing list >> frog(a)lists.frrouting.org > > https://lists.frrouting.org/listinfo/frog

1 0

Installing FRR on Ubuntu 18.04
by ian.2.oakley＠bt.com 10 Feb '20

10 Feb '20

Hi all, I've been trying to reinstall FRR on my Ubuntu 18.04 virtual machine, following the instructions given in the official guidance (http://docs.frrouting.org/projects/dev-guide/en/latest/building-frr-for-ubu…) but when I do I get the following error on the sudo make install stage: configure: error: libyang needs to be compiled with ENABLE_LYD_PRIV=ON. Instructions for this are included in the build documentation for your platform at http://docs.frrouting.org/projects/dev-guide/en/latest/building.html Having installed libyang from source with ENABLE_LYD_PRIV=ON, I'm not sure what's occurring. Does libyang need to be installed into the FRR directory for it to work properly? Best regards Ian Oakley Research Specialist IoT Security +44 (0)1473 626841 [EmailSigLogo] This email contains information from BT that might be privileged or confidential. And it's only meant for the person above. If that's not you, we're sorry - we must have sent it to you by mistake. Please email us to let us know, and don't copy or forward it to anyone else. Thanks. We monitor our email systems and may record all our emails. British Telecommunications plc R/O : 81 Newgate Street, London EC1A 7AJ Registered in England: No 1800000

4 7

回复：frog Digest, Vol 34, Issue 11
by xiaoyu＠ongod.org 09 Feb '20

09 Feb '20

1 0

WireGuard CKR key from BGP dupport
by Алексей 01 Feb '20

01 Feb '20

As an idea to implement key exchange through ckr by bgp from WireGuard?

1 0

Dual Core Design
by Travis Garrison 27 Jan '20

27 Jan '20

Trying to make sure I have the design down. We have 2 cores and 2 upstream connections. We also have a cross connect to an IX off 1 core. What would be the best way to configure iBGP between the cores so that we would gain the benefit of the IX from both cores and concurrent/failover usage from both upstream providers. Both upstream providers are the same speed and we advertise our networks to both in a multihomed scenario. We may be adding a 3rd core/upstream provider in the future. Core1 connects to ISP1 (full table) and IX Core2 connects to ISP2 (full table) All edge routers have an iBGP connection to both core routers and receive default routes only. Debian 10 FRR 7.2 Thanks Travis

1 0

(no subject)
by conneyh＠fnetlink.com 16 Jan '20

16 Jan '20

Dear frr 请问你们支持ipsec vpn吗？黄刚 Conney 技术工程师/ Technical Engineer Mobile: +86-13141707468 E-mail: conneyh(a)fnetlink.com 座机：0769-23158369-8672 - - - - - - - - - - - - - - - - - - - - 如果您在使用中遇到任何技术上问题，可拔打以下电话，我们将竭诚为您服务：全国服务热线：400-622-8986 香港服务热线：(+852) 2180 7378 台湾服务热线：(+886) 2 7728 7450 地址：东莞市旗峰路190号城市花园商贸中心13楼1302室 Add: Rm 1302, 13/F, Dongguan City Garden Business Center，No.190 Qifeng Road, Dongguan, Guangdong 深圳｜北京｜上海｜广州｜东莞｜香港｜澳门｜台湾

1 0

VTYSH and BGP options
by Simon Attwell 15 Jan '20

15 Jan '20

Hi All, New install of FRR on a Debian box, doing BGP on a couple of interfaces in a VRF (netns based). All is good except most of the bgp neighbour options are missing in VTYSH (neighbor <peer> <option>). In particular the options for weight or as-prepent or as-path filtering are missing. Is there something obvious I'm missing? * Simon

3 4