<div dir="ltr"><div dir="ltr"><div><br></div></div><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 11, 2019 at 3:19 AM Ondrej Zajicek <<a href="mailto:santiago@crfreenet.org">santiago@crfreenet.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Tue, Dec 10, 2019 at 10:09:06PM +0100, wax xitau wrote:<br>
> Hi,<br>
> <br>
> Prefixes sent over a eBGP session are getting rejected "by protocol" as can<br>
> be seen in the logs below.<br>
<br>
> The prefixes are "added" and then get "rejected" by protocol.<br>
<br>
Hi<br>
<br>
This 'rejected by protocol' is completely harmless. That just means pe1<br>
reject it back - no need to send the route back to the peer.</blockquote><div><br></div><div>Thanks for the explanation, and I actually did see the "rejected by protocol" line in the logs (below) when I reconfigured using a different address family (vpn4 mpls). </div><div><br></div><div>2019-12-11 08:26:06.951 <TRACE> <b>pe1 > added [best] 65001:101 <a href="http://10.1.12.0/24">10.1.12.0/24</a> unicast</b><br>2019-12-11 08:26:06.951 <TRACE> <b>pe1 < rejected by protocol 65001:101 <a href="http://10.1.12.0/24">10.1.12.0/24</a> unicast</b><br>2019-12-11 08:26:06.951 <TRACE> pe1 < rejected by protocol 65001:101 <a href="http://10.1.12.0/24">10.1.12.0/24</a> unicast<br>2019-12-11 08:26:06.951 <TRACE> pe1: Sending END-OF-RIB<br></div><div><br></div><div>Probably minor but "show route" seems to display both tables, master4 & t_pe1 (below) when i used vpn4 mpls address family but not when ipv4 unicast AF is used. </div><div><br></div><div><b>bird> show route</b><br><b>Table master4:</b><br><a href="http://0.0.0.0/0">0.0.0.0/0</a> unicast [kernel1 07:43:41.186] (10)<br> via 192.168.255.1 on ens4<br><a href="http://172.16.0.11/32">172.16.0.11/32</a> unicast [rt_nh 07:43:41.178] * (200)<br> via 192.168.254.1 on ens5<br> unicast [kernel1 08:23:59.916] (10)<br> via 192.168.254.1 on ens5<br><a href="http://172.16.0.33/32">172.16.0.33/32</a> unicast [rt_nh 07:43:41.178] * (200)<br> via 192.168.254.3 on ens6<br><br><b>Table t_pe1:</b><br>65001:101 <a href="http://10.1.12.0/24">10.1.12.0/24</a> unicast [pe1 08:26:06.951 from 172.16.0.11] * (100/?) [AS65500i]<br> via 192.168.254.1 on ens5 mpls 21<br><b>bird></b><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> </blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
> This means that they are visible using the "show route protocol<br>
> <protocol>" but not<br>
> "show route all" (and therefore impossible to push them to the kernel<br>
> routing table).<br>
<br>
No, the reason why the route is shown in 'show route protocol' but not<br>
regular 'show route' is that BGP is connected to table t_pe1, while<br>
Kernel is connected to (default) table master4. The first command shows<br>
by default routes in table attached to the specified protocol, while the<br>
second one shows routes in default table. But you do not have connection<br>
between these tables (using pipe protocol), so BGP routes stay in t_pe1<br>
and are not in master4, so that is another reason why they are not<br>
exported to the kernel.<br></blockquote><div><br></div><div>Explains a lot! I had missed the part about being in master4 to be exported to the kernel and another use case for peer tables. </div><div><br></div><div>A (most likely dump) question that's unrelated to the current topic: </div><div>- is it possible to discard the route distinguisher from vpn4 mpls prefix (essentially changing the AF to labelled unicast) while retaining the labelled next hop ? maybe during export to kernel ?</div><div><br></div><div>Thanks, </div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
-- <br>
Elen sila lumenn' omentielvo<br>
<br>
Ondrej 'Santiago' Zajicek (email: <a href="mailto:santiago@crfreenet.org" target="_blank">santiago@crfreenet.org</a>)<br>
OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, <a href="http://wwwkeys.pgp.net" rel="noreferrer" target="_blank">wwwkeys.pgp.net</a>)<br>
"To err is human -- to blame it on a computer is even more so."<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Eric Gitau<br></div><div>0631234053</div><b>Wifirst</b></div><div dir="ltr"><b><br></b><span><font color="#888888"><span style="font-family:Calibri,sans-serif;font-size:15px"><span style="font-size:8pt;font-family:Verdana,sans-serif" lang="EN-GB"><font color="#888888">26 rue de Berri, 75008 Paris</font></span></span></font></span><br></div></div></div></div></div>