- frog - lists.frrouting.org

Nagios Monitoring
by Daniel 30 Nov '17

30 Nov '17

Hi There, is there any way to monitor all my BGP Sessions with Nagios? Actually I cant find any information about it. Only via SNMP but SNMP seems not possible because pfSense seems restricted in that issue. Cheers Daniel

2 2

trouble to making work BFD in OSPF
by Jonathan Grégoire 28 Nov '17

28 Nov '17

Hi all, I'm having a problem with BFD, it looks like that it doesn't want to start. The BFD status still at Unknown even if it's configured under interfaces. I make some search on the net but to find any solution. I might miss something in my config... or anybody might get the same thing as me. Could you help to make BFD work? ===================== ! interface enp0s8 ip ospf network point-to-point ip ospf hello-interval 60 ip ospf dead-interval 240 ip ospf bfd 3 300 300 ! interface enp0s9 ip ospf network point-to-point ip ospf hello-interval 60 ip ospf dead-interval 240 ip ospf bfd 3 300 300 ! router01-ospf# show ip ospf nei detail Neighbor 2.2.2.2, interface address 169.254.0.2 In the area 0.0.0.0 via interface enp0s8 Neighbor priority is 1, State is Full, 5 state changes Most recent state change statistics: Progressive change 8m59s ago DR is 0.0.0.0, BDR is 0.0.0.0 Options 2 *|-|-|-|-|-|E|- Dead timer due in 3m00s Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 Thread Inactivity Timer on Thread Database Description Retransmision off Thread Link State Request Retransmission on Thread Link State Update Retransmission on BFD: Type: single hop Detect Mul: 3, Min Rx interval: 300, Min Tx interval: 300 Status: Unknown, Last update: never Neighbor 2.2.2.2, interface address 169.254.1.2 In the area 0.0.0.0 via interface enp0s9 Neighbor priority is 1, State is Full, 5 state changes Most recent state change statistics: Progressive change 8m59s ago DR is 0.0.0.0, BDR is 0.0.0.0 Options 2 *|-|-|-|-|-|E|- Dead timer due in 3m00s Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 Thread Inactivity Timer on Thread Database Description Retransmision off Thread Link State Request Retransmission on Thread Link State Update Retransmission on BFD: Type: single hop Detect Mul: 3, Min Rx interval: 300, Min Tx interval: 300 Status: Unknown, Last update: never router01-ospf# =====================

2 1

BGP RPKI available in FRouting!
by Donald Sharp 17 Nov '17

17 Nov '17

All - I'd like to announce the arrival of BGP RPKI (RFC 6810) to FRRouting. I'd like to thank Marcel for taking the time to submit this code. To use this code, ensure that you have installed a new dependant library rtrlib available here: http://rtrlib.realmv6.org/ And configure FRR with `--enable-rpki` when compiling it. Thanks! donald

2 1

Security Issue CVE-2017-15865
by Donald Sharp 16 Nov '17

16 Nov '17

All - Security Issue CVE-2017-15865: `A Vulnerability exists in the BGP daemon of FRR where a malformed BGP Update packet can leak information from the BGP daemon and cause a denial of service by crashing the daemon` Has been fixed in releases 3.0.2 and 2.0.2 and the master branch of FRR. For further information: https://frrouting.org/community/security/cve-2017-15865.html As always the source is available at https://github.com/frrouting/frr Release Information can be found here: https://github.com/FRRouting/frr/releases thanks! donald

1 0

Re: [FROG] [dev] VTY status 13 while sending config over vty socket
by Donald Sharp 23 Oct '17

23 Oct '17

Siddhesh - This works for me: dell-s6000-02# conf t dell-s6000-02(config)# exit dell-s6000-02# configure terminal dell-s6000-02(config)# router bgp 1234 vrf foo dell-s6000-02(config-router)# neighbor 2.2.2.2 remote-as 3456 dell-s6000-02(config-router)# neighbor 2.2.2.2 shutdown dell-s6000-02(config-router)# address-family ipv6 unicast dell-s6000-02(config-router-af)# redistribute connected dell-s6000-02(config-router-af)# exit-address-family dell-s6000-02(config-router)# address-family ipv6 unicast dell-s6000-02(config-router-af)# redistribute static dell-s6000-02(config-router-af)# exit-address-family dell-s6000-02(config-router)# address-family ipv4 unicast dell-s6000-02(config-router-af)# redistribute connected dell-s6000-02(config-router-af)# exit-address-family dell-s6000-02(config-router)# address-family ipv4 unicast dell-s6000-02(config-router-af)# redistribute static dell-s6000-02(config-router-af)# exit-address-family dell-s6000-02(config-router)# end dell-s6000-02# end dell-s6000-02# show run ! router bgp 1234 vrf foo neighbor 2.2.2.2 remote-as 3456 neighbor 2.2.2.2 shutdown ! address-family ipv4 unicast redistribute connected redistribute static exit-address-family ! address-family ipv6 unicast redistribute connected redistribute static exit-address-family ! What version of FRR are you using? On Wed, Oct 18, 2017 at 4:06 PM, $iddhe$h Divekar <siddhesh.divekar(a)gmail.com> wrote: > Hi, > Am getting following error when sending config over vty socket. > VTY status 13. > > Below is the config am trying to send. > It happens when "redistribute connected" is sent over the socket. > > configure terminal > router bgp 1234 vrf foo > neighbor 2.2.2.2 remote-as 3456 > neighbor 2.2.2.2 shutdown > address-family ipv6 unicast > redistribute connected > exit-address-family > address-family ipv6 unicast > redistribute static > exit-address-family > address-family ipv4 unicast > redistribute connected > exit-address-family > address-family ipv4 unicast > redistribute static > exit-address-family > end > > If I do show running I see following config applied. > router bgp 1234 vrf foo > neighbor 2.2.2.2 remote-as 3456 > neighbor 2.2.2.2 shutdown > ! > address-family ipv6 unicast > redistribute connected > exit-address-family > ! > > Is there anything wrong with the config. > Copy pasting the config directly works fine. > > -- > -$iddhesh. > > _______________________________________________ > dev mailing list > dev(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/dev >

2 1

VTY status 13 while sending config over vty socket
by $iddhe$h Divekar 20 Oct '17

20 Oct '17

Hi, Am getting following error when sending config over vty socket. VTY status 13. Below is the config am trying to send. It happens when "redistribute connected" is sent over the socket. configure terminal router bgp 1234 vrf foo neighbor 2.2.2.2 remote-as 3456 neighbor 2.2.2.2 shutdown address-family ipv6 unicast redistribute connected exit-address-family address-family ipv6 unicast redistribute static exit-address-family address-family ipv4 unicast redistribute connected exit-address-family address-family ipv4 unicast redistribute static exit-address-family end If I do show running I see following config applied. router bgp 1234 vrf foo neighbor 2.2.2.2 remote-as 3456 neighbor 2.2.2.2 shutdown ! address-family ipv6 unicast redistribute connected exit-address-family ! Is there anything wrong with the config. Copy pasting the config directly works fine. -- -$iddhesh.

1 1

BGP CPU Usage
by Richard J Palmer 17 Oct '17

17 Oct '17

Hi We have FRR running on a number of core routers here - However it seems that bgpd is using 100% CPU most of the time: top - 12:48:16 up 95 days, 20:02, 1 user, load average: 1.41, 1.25, 1.20 Tasks: 151 total, 4 running, 147 sleeping, 0 stopped, 0 zombie %Cpu(s): 11.7 us, 3.6 sy, 0.0 ni, 83.8 id, 0.0 wa, 0.0 hi, 0.9 si, 0.0 st MiB Mem : 3937.914 total, 509.301 free, 2035.738 used, 1392.875 buff/cache MiB Swap: 3082.750 total, 3082.750 free, 0.000 used. 1410.402 avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 23010 root 20 0 1651212 1.515g 3764 R 93.0 39.4 1594:12 bgpd 1050 root 20 0 409292 347104 3676 R 36.2 8.6 48720:02 zebra 7 root 20 0 0 0 0 S 0.3 0.0 866:46.42 rcu_sch There's only 15 peers mostly internal (one transit link). I am using both Ipv4 and IPv6 I am happy to share the bgp config as needed - biut there's nothing obvious I can see ... And the log is not showing any substantial entries Is there something I am missing / or would give a hint on what is causing this high load / and how to resolve it ? Thanks Richard

2 1

FRR 3.0 Released
by Martin Winter 16 Oct '17

16 Oct '17

FRRouting 3.0 is released! Git: https://github.com/FRRouting/frr/tree/stable/3.0 (Some) Binary Package Downloads: https://github.com/FRRouting/frr/releases/tag/frr-3.0 3.0 Changes (since version 2.0): https://github.com/FRRouting/frr/wiki/FRR-2.0-%E2%86%92-FRR-3.0-Changelog Snap packages are online in the Ubuntu Store as well (amd64, i386, armhf, arm64, ppc64el architectures). Enjoy! - Martin Winter

1 0

nexthop_set failed
by Xinwei Hong 07 Oct '17

07 Oct '17

Hi I have a two bgp router setting between 192.168.3.2 and 192.168.3.3. On 192.168.3.2, I have to following config. similar config as on 192.168.3.3 ----bgpd.conf ! -*- bgp -*- ! hostname bgpd password zebra ! router bgp 7632 neighbor 192.168.3.3 remote-as 7633 bgp router-id 192.168.3.2 network 10.200.0.0/16 ! address-family ipv4 unicast network 10.201.142.0/24 neighbor 192.168.3.3 activate neighbor 192.168.3.3 next-hop-self exit-address-family ! access-list all permit any ! route-map set-nexthop permit 10 match ip address all set ip next-hop 192.168.3.3 ! log file /var/log/frr/bgpd.log log stdout log syslog ------------------ In log, I find the following errors. 2017/10/03 23:29:40 BGP: 192.168.3.3: nexthop_set failed, resetting connection - intf (nil) 2017/10/03 23:29:40 BGP: bgp_connect_success: bgp_getsockname(): failed for peer 192.168.3.3, fd 9 2017/10/03 23:29:40 BGP: 192.168.3.3 [FSM] Failure handling event TCP_connection_open in state Connect, prior events BGP_Start, BGP_Start, fd 9 Is there anything wrong with my config? Thanks, Xinwei

2 7

nexthop_set failed
by Xinwei Hong 04 Oct '17

04 Oct '17

Hi I have a two bgp router setting between 192.168.3.2 and 192.168.3.3. On 192.168.3.2, I have to following config. similar config as on 192.168.3.3 ----bgpd.conf ! -*- bgp -*- ! hostname bgpd password zebra ! router bgp 7632 neighbor 192.168.3.3 remote-as 7633 bgp router-id 192.168.3.2 network 10.200.0.0/16 ! address-family ipv4 unicast network 10.201.142.0/24 neighbor 192.168.3.3 activate neighbor 192.168.3.3 next-hop-self exit-address-family ! access-list all permit any ! route-map set-nexthop permit 10 match ip address all set ip next-hop 192.168.3.3 ! log file /var/log/frr/bgpd.log log stdout log syslog ------------------ In log, I find the following errors. 2017/10/03 23:29:40 BGP: 192.168.3.3: nexthop_set failed, resetting connection - intf (nil) 2017/10/03 23:29:40 BGP: bgp_connect_success: bgp_getsockname(): failed for peer 192.168.3.3, fd 9 2017/10/03 23:29:40 BGP: 192.168.3.3 [FSM] Failure handling event TCP_connection_open in state Connect, prior events BGP_Start, BGP_Start, fd 9 Is there anything wrong with my config? Thanks, Xinwei

1 0