list members, i am new to the list, and trying to get FRR working in my home network. i have an old instance of quagga working and want to update to a newer OS and routing instance on my router/gateway. i know there is room for improvement in how i am doing things now, but getting to a current version and have that working is the objective. making improvements would be subsequent to having a working routing platform. i have what i am told is an ebgp setup, where my router in in AS 65535 and my servers are in AS 64512. my servers announce several routes depending on what services they are running, and the FRR instance does get those announcements. if i go into vtysh and run a "sh ip route" i see all of the routes i am expecting. but, from a plain OS command line, "ip route" only shows the routes associated with the interfaces on the box. none of the announced/advertised routes from the servers show up. in essence, the routing deamon is getting the routes, but somehow the OS is not getting them. is there some config item i am missing or an OS level setting that i have to adjust to get things working as i expect them? FRR config: frr version 10.3 frr defaults traditional hostname router log syslog errors service advanced-vty service password-encryption ! ip prefix-list SSL-Tap seq 5 permit 192.168.184.0/24 le 32 ip prefix-list SSL-Tun seq 5 permit 192.168.185.0/24 le 32 ip prefix-list Virtuals seq 5 permit 192.168.251.0/24 le 32 ip prefix-list VIPs seq 5 permit 192.168.252.0/24 le 32 ip prefix-list Storage seq 5 permit 192.168.253.0/24 le 32 ip prefix-list Anycast seq 5 permit 192.168.254.0/24 le 32 ip prefix-list IPSec seq 5 permit 192.168.152.0/24 le 32 ! route-map RM_Set_Src permit 10 set src 192.168.248.254 exit ! route-map VPN_in permit 10 match ip address prefix-list IPSec exit ! route-map VPN_in permit 20 match ip address prefix-list SSL-Tap exit ! route-map VPN_in permit 30 match ip address prefix-list SSL-Tap exit ! interface bond0 no link-detect exit ! interface database ip address 192.168.120.3/32 no link-detect exit ! interface enp3s0f0 no link-detect exit ! interface enp3s0f1 no link-detect exit ! interface enp4s0f0 no link-detect exit ! interface enp4s0f1 no link-detect exit ! interface imap ip address 192.168.120.5/32 no link-detect exit ! interface kadmin ip address 192.168.120.10/32 no link-detect exit ! interface ldap ip address 192.168.120.8/32 no link-detect exit ! interface postgres ip address 192.168.120.12/32 no link-detect exit ! interface privoxy ip address 192.168.120.13/32 no link-detect exit ! interface proxy ip address 192.168.120.1/32 no link-detect exit ! interface redis ip address 192.168.120.11/32 no link-detect exit ! interface relp ip address 192.168.120.4/32 no link-detect exit ! interface smtp ip address 192.168.120.6/32 no link-detect exit ! interface submission ip address 192.168.120.7/32 no link-detect exit ! interface vlan1 ip address 192.168.1.254/24 exit ! interface vlan24 ip address 192.168.24.254/24 exit ! interface vlan56 ip address 192.168.56.254/24 exit ! interface vlan57 ip address 192.168.57.254/24 exit ! interface vlan88 ip address 192.168.88.254/24 exit ! interface vlan120 ip address 192.168.120.254/24 exit ! interface vlan216 ip address 192.168.216.254/24 exit ! interface vlan248 ip address 192.168.248.254/24 exit ! interface www ip address 192.168.120.2/32 no link-detect exit ! router bgp 65535 bgp router-id 192.168.248.254 no bgp ebgp-requires-policy timers bgp 4 16 neighbor 192.168.88.1 remote-as 64512 neighbor 192.168.88.1 description server1 neighbor 192.168.88.1 ttl-security hops 1 neighbor 192.168.88.2 remote-as 64512 neighbor 192.168.88.2 description server2 neighbor 192.168.88.2 ttl-security hops 1 neighbor 192.168.88.3 remote-as 64512 neighbor 192.168.88.3 description nas neighbor 192.168.88.3 ttl-security hops 1 neighbor 192.168.88.4 remote-as 64512 neighbor 192.168.88.4 description hypervisor neighbor 192.168.88.4 ttl-security hops 1 neighbor 192.168.88.5 remote-as 64512 neighbor 192.168.88.5 description vpn neighbor 192.168.88.5 ttl-security hops 1 neighbor 192.168.88.8 remote-as 64512 neighbor 192.168.88.8 description server3 neighbor 192.168.88.8 ttl-security hops 1 ! address-family ipv4 unicast network 192.168.1.0/24 network 192.168.24.0/24 network 192.168.56.0/24 network 192.168.57.0/24 network 192.168.88.0/24 network 192.168.120.0/24 network 192.168.216.0/24 network 192.168.248.0/24 neighbor 192.168.88.1 next-hop-self neighbor 192.168.88.1 soft-reconfiguration inbound neighbor 192.168.88.1 prefix-list Anycast in neighbor 192.168.88.2 next-hop-self neighbor 192.168.88.2 soft-reconfiguration inbound neighbor 192.168.88.2 prefix-list Anycast in neighbor 192.168.88.3 next-hop-self neighbor 192.168.88.3 soft-reconfiguration inbound neighbor 192.168.88.3 prefix-list Storage in neighbor 192.168.88.4 next-hop-self neighbor 192.168.88.4 soft-reconfiguration inbound neighbor 192.168.88.4 prefix-list Virtuals in neighbor 192.168.88.5 next-hop-self neighbor 192.168.88.5 soft-reconfiguration inbound neighbor 192.168.88.5 route-map VPN_in in neighbor 192.168.88.8 next-hop-self neighbor 192.168.88.8 soft-reconfiguration inbound neighbor 192.168.88.8 prefix-list Anycast in maximum-paths 4 maximum-paths ibgp 4 exit-address-family exit ! access-list 50 seq 5 permit 192.168.88.1 access-list 50 seq 10 permit 192.168.88.2 access-list 50 seq 15 permit 192.168.88.3 access-list 50 seq 20 permit 192.168.88.4 access-list 50 seq 25 permit 192.168.88.5 access-list 50 seq 30 permit 192.168.88.8 ! ip protocol bgp route-map rm_Set_Src ! ip routing scheme expected: default via 192.168.40.1 dev enp7s0 192.168.1.0/24 dev bond0.1 proto kernel scope link src 192.168.1.254 192.168.24.0/24 dev bond0.24 proto kernel scope link src 192.168.24.254 192.168.40.0/24 dev enp7s0 proto kernel scope link src 192.168.40.149 192.168.56.0/24 dev bond0.56 proto kernel scope link src 192.168.56.254 192.168.57.0/24 dev bond0.57 proto kernel scope link src 192.168.57.254 192.168.88.0/24 dev bond0.88 proto kernel scope link src 192.168.88.254 192.168.120.0/24 dev bond0.120 proto kernel scope link src 192.168.120.254 192.168.152.0/24 via 192.168.88.5 dev bond0.88 proto zebra metric 20 192.168.184.0/24 via 192.168.88.5 dev bond0.88 proto zebra metric 20 192.168.185.0/24 via 192.168.88.5 dev bond0.88 proto zebra metric 20 192.168.216.0/24 dev bond0.216 proto kernel scope link src 192.168.216.254 192.168.248.0/24 dev bond0.248 proto kernel scope link src 192.168.248.254 192.168.253.1 via 192.168.88.3 dev bond0.88 proto zebra metric 20 192.168.253.2 via 192.168.88.3 dev bond0.88 proto zebra metric 20 192.168.253.3 via 192.168.88.3 dev bond0.88 proto zebra metric 20 192.168.254.1 proto zebra metric 20 nexthop via 192.168.88.2 dev bond0.88 weight 1 nexthop via 192.168.88.1 dev bond0.88 weight 1 nexthop via 192.168.88.8 dev bond0.88 weight 1 192.168.254.2 proto zebra metric 20 nexthop via 192.168.88.2 dev bond0.88 weight 1 nexthop via 192.168.88.1 dev bond0.88 weight 1 nexthop via 192.168.88.8 dev bond0.88 weight 1 192.168.254.3 proto zebra metric 20 nexthop via 192.168.88.2 dev bond0.88 weight 1 nexthop via 192.168.88.1 dev bond0.88 weight 1 nexthop via 192.168.88.8 dev bond0.88 weight 1 192.168.254.4 proto zebra metric 20 nexthop via 192.168.88.2 dev bond0.88 weight 1 nexthop via 192.168.88.1 dev bond0.88 weight 1 nexthop via 192.168.88.8 dev bond0.88 weight 1 192.168.254.5 proto zebra metric 20 nexthop via 192.168.88.2 dev bond0.88 weight 1 nexthop via 192.168.88.1 dev bond0.88 weight 1 nexthop via 192.168.88.8 dev bond0.88 weight 1 192.168.254.6 proto zebra metric 20 nexthop via 192.168.88.2 dev bond0.88 weight 1 nexthop via 192.168.88.1 dev bond0.88 weight 1 nexthop via 192.168.88.8 dev bond0.88 weight 1 any help or insight into how i messed things up would be appreciated. thanks in advance, brendan kearney
participants (1)
-
Brendan Kearney