July 2009 - Bird-users - Mailing Lists

Bird/iBGP
by Dr. Christian Riede 03 Aug '09

03 Aug '09

Hello, our bird is now connected to our upstream provider. I see the following behaviour: Bird gets 287952 prefixes from its upstream router, but does not redistribute those routes to its direct iBGP neighbours. The neighbours are: Quagga 0.99.13 and OpenBGPD-current (cvs update from today) Quagga does redistribute its externaly learnt routes via iBGP. What am i missing? Here my configuration: ---------------------------------------------------------------------------------- # Configure logging log syslog { debug, trace, info, remote, warning, error, auth, fatal, bug }; #log stderr all; #log "bird.log" all; # Override router ID router id x.x.x.8; protocol direct { } protocol kernel { persist; # Don't remove routes on bird shutdown scan time 20; # Scan kernel routing table every 20 seconds export all; # Default is export none } protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol static { route x.x.x.0:255.255.255.0 via x.x.x.4; } filter ospfout { if net ~ x.x.x.0/24 then accept; else reject; } filter ospfin { if net ~ x.x.x.0/24 then accept; else reject; } protocol ospf MyOSPF { #disabled; tick 2; rfc1583compat yes; import filter ospfin; export filter ospfin; area 0.0.0.0 { stub no; interface "eth0" { hello 10; retransmit 5; cost 10; transmit delay 5; dead count 4; wait 40; type broadcast; authentication cryptographic; passwords { password "ajd74bdkwehhgfhd" { id 1; }; }; }; interface "eth1" { hello 10; retransmit 5; cost 10; transmit delay 5; dead count 4; wait 40; type broadcast; authentication cryptographic; passwords { password "ajd74bdkwehhgfhd" { id 1; }; }; }; }; } filter bgpin { if net ~ 10.0.0.0/8 then reject; if net ~ 192.168.0.0/16 then reject; if net ~ 172.16.0.0/12 then reject; if net ~ 169.254.0.0/16 then reject; if net ~ 169.254.0.0/16 then reject; if net ~ 224.0.0.0/4 then reject; if net ~ 240.0.0.0/4 then reject; else accept; } filter ebgpout { if net ~ x.x.x.0/24 then accept; else reject; } protocol bgp { #debug all; local as yyyyy; import filter bgpin; export all; enable as4 yes; hold time 600 ; keepalive time 10; neighbor x.x.x.2 as yyyyy; path metric 1; default bgp_med 0; default bgp_local_pref 0; } protocol bgp { local as yyyyy; import filter bgpin; export all; enable as4 yes; hold time 600 ; keepalive time 10; neighbor x.x.x.3 as yyyyy; path metric 1; default bgp_med 0; default bgp_local_pref 0; } protocol bgp { local as yyyyy; import filter bgpin; export all; enable as4 yes; hold time 600 ; keepalive time 10; neighbor x.x.x.7 as yyyyy; path metric 1; default bgp_med 0; default bgp_local_pref 0; } protocol bgp { local as yyyyy; import filter bgpin; export all; enable as4 yes; hold time 600 ; keepalive time 10; neighbor x.x.x.17 as yyyyy; path metric 1; default bgp_med 0; default bgp_local_pref 0; } protocol bgp { local as yyyyy; import filter bgpin; export all; enable as4 yes; hold time 600 ; keepalive time 10; neighbor x.x.x.18 as yyyyy; path metric 1; default bgp_med 0; default bgp_local_pref 0; } protocol bgp { local as yyyyy; import filter bgpin; export all; enable as4 yes; hold time 600 ; keepalive time 10; neighbor x.x.x.19 as yyyyy; path metric 1; default bgp_med 0; default bgp_local_pref 0; } protocol bgp { local as yyyyy; import filter bgpin; export filter ebgpout; enable as4 yes; hold time 600 ; keepalive time 10; neighbor z.z.z.z as aaaaa; path metric 1; default bgp_med 0; default bgp_local_pref 0; } -------------------------------------------------------------------------------------- Mit freundlichen Grüßen Dr. Christian Riede Teamleiter Technik -- _________________________________________ =C=O=N=N=E=C=T== Karlsruhe GmbH Computer und Netzwerktechnik Gebrüder-Himmelheber-Straße 7 D-76135 Karlsruhe Amtsgericht Mannheim HRB 110258 Geschäftsführer: Stefan Kratzer Telefon: +49 (0) 721 20120-0 Telefax: +49 (0) 721 20120-500 Internet: www.it-connect.de E-Mail: christian.riede(a)it-connect.de _________________________________________

4 4

Re: Installing BIRD
by Ondrej Filip 30 Jul '09

30 Jul '09

On 30.7.2009 16:50, David Simmons wrote: > Hi Guys, Hi! > > Recommended to BIRD by Andy @ LONAP and various peeps @ LINX. > > Am trying to install 1.1.0 from src and get: > > [root@core2 bird-1.1.0]# make > make -C obj all > make[1]: Entering directory `/usr/src/packages/SOURCES/bird-1.1.0/obj' > make depend > make[2]: Entering directory `/usr/src/packages/SOURCES/bird-1.1.0/obj' > set -e ; for a in lib conf ; do make -C $a depend ; done > make[3]: Entering directory `/usr/src/packages/SOURCES/bird-1.1.0/obj/lib' > make[3]: `depend' is up to date. > make[3]: Leaving directory `/usr/src/packages/SOURCES/bird-1.1.0/obj/lib' > make[3]: Entering directory `/usr/src/packages/SOURCES/bird-1.1.0/obj/conf' > bison -bcf-parse -dv -pcf_ cf-parse.y > cf-parse.y:677.4-12: symbol PASSWORDS is used, but is not defined as a token > and has no rules > cf-parse.y:1615.9-17: symbol BROADCAST is used, but is not defined as a token > and has no rules > make[3]: *** [cf-parse.tab.c] Error 1 > make[3]: Leaving directory `/usr/src/packages/SOURCES/bird-1.1.0/obj/conf' > make[2]: *** [depend] Error 2 > make[2]: Leaving directory `/usr/src/packages/SOURCES/bird-1.1.0/obj' > make[1]: *** [.dep-stamp] Error 2 > make[1]: Leaving directory `/usr/src/packages/SOURCES/bird-1.1.0/obj' > make: *** [all] Error 2 > Fixed - it is in GIT tree now. However adding RIP protocol should fix the problem. > Have tried adding redhat repo and using yum but get: > > [root@core2 bird-1.1.0]# yum install bird > Setting up Install Process > Package bird is obsoleted by quagga, trying to install > quagga-0.99.11-2.fc11.x86_64 instead Hmm, that is a problem of Redhat guys. I discussed this issue with them and they promised to fix this. I will send them another letter. :-( > > I don't mind installing from source, but I have searched and searched but > can't find an answer to the above error. > > I have all required packages installed (On a recent UNIX system with GNU > development tools (GCC, binutils, m4, make) and Perl, installing BIRD should > be as easy as: ) but no avail. > > System is running Fedora Core 11 64-Bit. > > Oh and I tried subscribing to the users lists but got no response from > majordomo :( Can you send the email again and add me into Cc? Ondrej > > Kindest Regards, > > Dave > > -- > > David Simmons > Elite Limited > > EMail: david.simmons(a)elite.net.uk > Tel: +44 (0) 2392 344450 > Mob: +44 (0) 7795 840 111 > _____________________________________________________________________ > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. Elite Limited do not accept legal responsibility for > the contents of this message. Any views or opinions presented are > solely those of the author and do not necessarily represent those of > Elite Limited. This message can not be classed as SPAM, the recipient > has not been added to any mailing lists. > > http://www.elite.net.uk > _____________________________________________________________________ > > Elite Limited is registered in England > > Company Registration Number 03759064 > > Internet House, 33 Kingston Crescent, Portsmouth. PO2 8AA

1 0

BGP Reconfiguration
by Wolfgang Hennerbichler 09 Jul '09

09 Jul '09

Hi folks, after reading the whole documentation nearly twice, I configured some stuff with BGP and so far it looks quite nice. I really like the verbosity of bird, it totally tells me what's going on, this is really nice. One thing I don't like that much is that it seems that I don't have a chance to reconfigure ONE BGP neighbour without dropping the BGP sessions to all other neighbors. I'm altering the config-file for a specific BGP neighbor and after that I am issueing > configure soft from the birdc-shell. This drops the BGP connections to ALL neighbors. This is not ideal as I would like to use bird also a route-server on our internet-exchange. Of course this problem can be overcome by using two route-server instances, but this is not really satisfying (and IXP customers might not really like the fact that every new customer causes BGP drops). I understand that if I just tweak the filters no sessions are dropped. Do the developers think there is a fair chance to fix that? Furthermore, is there something like BGP soft reconfiguration (inbound/ outbound) for a specific peer? Wolfgang -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

2 6

question on md5 and linux
by Wolfgang Hennerbichler 09 Jul '09

09 Jul '09

Hi, sorry if this question has been asked 100times before, but I didn't find a mailing list archive. We (VIX, ACOnet) are taking a look at BIRD within the following months to use it for various purposes. One of the requirements though (and unfortunately) is to support md5 passwords. I know bird is capable of doing this but as far as my understanding goes this is something the operating system has to support, too. I know linux does now have native md5+tcp support in the kernel. Is this supported with BIRD? If so, does anybody have a hint for me how to use it (for not having to reinvent the wheel) on linux- side? Is there a wiki (other than euro-ix which I know of) where I could add precious information regarding my work with bird? thanks for any help; Wolfgang -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

2 2

how to filterout private ip ranges
by Martin Kraus 03 Jul '09

03 Jul '09

hi. I'm trying to filter out private ip ranges from ospf. I've defined filter: filter privateip { if net ~ [ 192.168.0.0/16+, 10.0.0.0/8+, 172.16.0.0/12+ ] then reject; accept; } and used in ospf protocol configuration: export filter privateip; in birdc using: show route filter privateip on this router shows only public ip prefixes. however on the neighbouring router I still get the private routes: 10.128.1.0/24 dev tap_infonet [ospf1 22:20] I (150/10) 172.29.201.0/24 via 10.128.1.1 on tap_infonet [ospf1 22:21] I (150/20) 172.16.7.0/24 via 10.128.1.1 on tap_infonet [ospf1 22:21] I (150/20) 172.23.0.128/25 via 10.128.1.1 on tap_infonet [ospf1 22:21] I (150/20) 172.16.30.0/24 via 10.128.1.1 on tap_infonet [ospf1 22:21] I (150/20) 172.23.4.128/25 via 10.128.1.1 on tap_infonet [ospf1 22:21] I (150/20) ospf export filter filters out some of the private prefixes, but not all. what bothers me is that using show route with the defined filter works right. is there something I'm doing wrong? thanks mk

2 2

Bird is crashing on NetBSD 5.0 sparc64 with Bus Error.
by Frederic Jaeckel 02 Jul '09

02 Jul '09

Hi everybody, as it works on x86 and amd64 like a charm, it doesn't on sparc64. Maybe someone want to have a look at it. :) Regards, Frederic Jaeckel -- PASTE -- # ./bird Bus error (core dumped) # gdb ./bird bird.core GNU gdb 6.5 Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "sparc64--netbsd"... Reading symbols from /usr/lib/libc.so.12...done. Loaded symbols for /usr/lib/libc.so.12 Reading symbols from /usr/libexec/ld.elf_so...done. Loaded symbols for /usr/libexec/ld.elf_so Core was generated by `bird'. Program terminated with signal 10, Bus error. #0 config_alloc (name=0x13d1d8 "/usr/pkg/etc/bird.conf") at conf.c:79 79 cfg_mem = c->mem = l; (gdb) backtrace #0 config_alloc (name=0x13d1d8 "/usr/pkg/etc/bird.conf") at conf.c:79 #1 0x000000000012e110 in unix_read_config (cp=0xffffffffffffba48, name=0x13d1d8 "/usr/pkg/etc/bird.conf") at main.c:93 #2 0x000000000012e2d8 in main (argc=1, argv=0xffffffffffffbba8) at main.c:111

2 1