FreeBSD 12.1 / FRR 7.4, error inserting v6 routes into zebra/kernel
Hi, I'm maintaining the FRR plugin for OPNsense Firewall, currently based on FreeBSD/HardenedBSD 12.1 with FRR 7.4. I received a report from a user that a peering via v6 the bgpd successfully receives the v6 routes which are also displayed in sh bgp ipv6, but they wont get into the routing table and in frr.log there's: kernel_rtm: X:X:X:X rtm_write() unexpectedly returned -2 for command RTM_ADD Bit more details and screenshots are also here available: https://twitter.com/TallWireless/status/1309489192502734850
While I'd like to get to the bottom of the issue, as a workaround has: route-map FOO permit 10 ipv6 next-hop prefer-global ! router bgp XX address-family ipv6 uni neighbor XXXX route-map FOO in been tried yet? Can we see the output of `debug zebra rib detail` and `debug zebra kernel`? I'd like to have a bit more surrounding data doanld On Mon, Sep 28, 2020 at 3:43 PM Muenz, Michael <m.muenz@spam-fetish.org> wrote:
Hi,
I'm maintaining the FRR plugin for OPNsense Firewall, currently based on FreeBSD/HardenedBSD 12.1 with FRR 7.4.
I received a report from a user that a peering via v6 the bgpd successfully receives the v6 routes which are also displayed in sh bgp ipv6, but they wont get into the routing table and in frr.log there's:
kernel_rtm: X:X:X:X rtm_write() unexpectedly returned -2 for command RTM_ADD
Bit more details and screenshots are also here available:
https://twitter.com/TallWireless/status/1309489192502734850
_______________________________________________ frog mailing list frog@lists.frrouting.org https://lists.frrouting.org/listinfo/frog
Dear Donald, Sorry for the delay, I set up a test lab with latest OPNsense and FRR 7.4, but with real interfaces it seems to work. I can not reproduce with full-table and WireGuard interfaces, maybe it's related to the interface type of WG (tun). I try to invite the author of the problem to join here. Best, Michael Am 29.09.2020 um 00:47 schrieb Donald Sharp:
While I'd like to get to the bottom of the issue, as a workaround has:
route-map FOO permit 10 ipv6 next-hop prefer-global !
router bgp XX address-family ipv6 uni neighbor XXXX route-map FOO in
been tried yet?
Can we see the output of `debug zebra rib detail` and `debug zebra kernel`?
I'd like to have a bit more surrounding data
doanld
On Mon, Sep 28, 2020 at 3:43 PM Muenz, Michael <m.muenz@spam-fetish.org> wrote:
Hi,
I'm maintaining the FRR plugin for OPNsense Firewall, currently based on FreeBSD/HardenedBSD 12.1 with FRR 7.4.
I received a report from a user that a peering via v6 the bgpd successfully receives the v6 routes which are also displayed in sh bgp ipv6, but they wont get into the routing table and in frr.log there's:
kernel_rtm: X:X:X:X rtm_write() unexpectedly returned -2 for command RTM_ADD
Bit more details and screenshots are also here available:
https://twitter.com/TallWireless/status/1309489192502734850
_______________________________________________ frog mailing list frog@lists.frrouting.org https://lists.frrouting.org/listinfo/frog
-- www.muenz-it.de - Cisco, Linux, Networks
participants (2)
-
Donald Sharp -
Muenz, Michael