<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}
p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Hello,<br></div><div><br></div><div>I'm trying to get IBGP session to work between Bird 2 and FFRouting (EdgeRouter).<br></div><div>They are using Wireguard for the link, and I can ping them fine. BGP port is also open on both.<br><br>What's happening here?</div><div><br></div><div><br>Errors I'm getting:</div><div><div>--------<br></div><div>2020-08-03 23:51:56.870 <TRACE> ibgp_tku: Incoming connection from 2001:67c:1104:1a00::1 (port 46843) rejected<br></div><div>--------<br></div><div><br></div><div>Full bird config:<br></div><div>----------------------------------------------------------------------------------------------------------------------------------------</div><div># Configure logging<br></div></div><div>#log syslog all;<br></div><div>#log "/var/log/bird.log" { debug, trace, info, remote, warning, error, auth, fatal, bug };<br></div><div><br></div><div>log "/var/log/bird.log" all;<br></div><div><br></div><div>#log syslog all;<br></div><div>debug protocols { events, states };<br></div><div><br></div><div># Set router ID. It is a unique identification of your router, usually one of<br></div><div># IPv4 addresses of the router. It is recommended to configure it explicitly.<br></div><div>router id 45.92.40.5;<br></div><div><br></div><div># Turn on global debugging of all protocols (all messages or just selected classes)<br></div><div>#debug protocols all;<br></div><div># debug protocols { events, states };<br></div><div><br></div><div># Turn on internal watchdog<br></div><div># watchdog warning 5 s;<br></div><div># watchdog timeout 30 s;<br></div><div><br></div><div># You can define your own constants<br></div><div>define my_asn = 213021;<br></div><div># define my_addr = 198.51.100.1;<br></div><div><br></div><div># Tables master4 and master6 are defined by default<br></div><div>ipv4 table master4;<br></div><div>ipv6 table master6;<br></div><div><br></div><div># Define more tables, e.g. for policy routing or as MRIB<br></div><div>ipv4 table mrib4;<br></div><div>ipv6 table mrib6;<br></div><div><br></div><div># The Device protocol is not a real routing protocol. It does not generate any<br></div><div># routes and it only serves as a module for getting information about network<br></div><div># interfaces from the kernel. It is necessary in almost any configuration.<br></div><div>protocol device {<br></div><div> scan time 5;<br></div><div>}<br></div><div><br></div><div>protocol direct DIRECT { ipv4; ipv6; }<br></div><div><br></div><div>protocol kernel KERNEL4 { ipv4 { export all; import none; }; }<br></div><div><br></div><div>protocol kernel KERNEL6 { ipv6 { export all; import none; }; }<br></div><div><br></div><div><br></div><div>protocol static STATIC6 {<br></div><div> ipv6;<br></div><div><br></div><div> route 2a0b:a700:3::2/128 via 2a07:22c0:c100::;<br></div><div> #route 2001:67c:1104:1a00::1 dev wg0;<br></div><div><br></div><div> #route 2a01:4f9:2b:f800::2 via 2a07:22c0:c100::;<br></div><div> #route 2a01:4f8::/29 via 2001:7f8:33::a105:8299:1;<br></div><div>}<br></div><div><br></div><div><br></div><div>filter internal_nets_v6 {<br></div><div> if net ~ [ 2a0e:b107:6ec::/48,2a0e:8f02:2010::/44,2001:67c:1104::/48 ] then accept;<br></div><div> reject;<br></div><div>}<br></div><div><br></div><div>filter no_export_internal_nets {<br></div><div> if net ~ [ 2a0e:b107:6ec::/48,2a0e:8f02:2010::/44,2001:67c:1104::/48 ] then {<br></div><div> bgp_community.add((65535:65281));<br></div><div> accept;<br></div><div> }<br></div><div> reject;<br></div><div>}<br></div><div><br></div><div>filter internal_route {<br></div><div> if net ~ [ 2a07:22c0:c100::/64 ] then reject;<br></div><div> accept;<br></div><div>}<br></div><div><br></div><div><br></div><div>template bgp T_SELF {<br></div><div> local 2001:67c:1104:1a00::2 as 213021;<br></div><div><br></div><div> ipv6 {<br></div><div> import filter internal_nets_v6;<br></div><div> export filter internal_route;<br></div><div> };<br></div><div>}<br></div><div><br></div><div><br></div><div><br></div><div>protocol bgp ibgp_tku from T_SELF {<br></div><div> neighbor 2001:67c:1104:1a00::1 as 213021;<br></div><div> #neighbor fe80::21b:21ff:febb:5db0%wg0 as 213021;<br></div><div> direct;<br></div><div><br></div><div> ipv6 {<br></div><div> import filter internal_nets_v6;<br></div><div> export all;<br></div><div> next hop self;<br></div><div> };<br></div><div>}<br></div><div><br></div><div>protocol bgp ibgp_de from T_SELF {<br></div><div> local 2001:67c:1104:1a01::1 as 213021;<br></div><div> neighbor 2001:67c:1104:1a01::2 as 213021;<br></div><div> direct;<br></div><div><br></div><div> ipv6 {<br></div><div> import all;<br></div><div> export all;<br></div><div> next hop self;<br></div><div> };<br></div><div>}<br></div><div><br></div><div>----------------------------------------------------------------------------------------------------------------------------------------<br></div><div><br></div><div><div>EdgeRouter side:<br></div>----------------------------------------------------------------------------------------------------------------------------------------</div><div>address-family { <br></div><div> ipv6-unicast {<br></div><div> prefix-list {<br></div><div> export ANNOUNCE-THESE<br></div><div> }<br></div><div> soft-reconfiguration {<br></div><div> inbound<br></div><div> }<br></div><div> }<br></div><div>}<br></div><div>description "Frankfurt, DE"<br></div><div>remote-as 213021<br></div><div>update-source 2001:67c:1104:1a00::1<br></div><div>----------------------------------------------------------------------------------------------------------------------------------------<br></div></body></html>