April 2015 - Bird-users - Mailing Lists

per interface route filtering
by olivier a 08 Apr '15

08 Apr '15

Is there a way to filter RIP announced routes on an interface basis ? I've had a look at the filtering part in the doc, but I'm still clueless about this ... Thanks for any help :-)

2 2

Inject BGP routes with non directly-connected next-hop
by Jan Huňka 07 Apr '15

07 Apr '15

Hello, I'm currently trying to configure BIRD for BGP injection. Routes which are added on BIRD should be distributed to specified neighbor router (in this case Cisco) and added to it's routing table. I also need to specify next-hop IP address of these routes, because injected routes should divert the matching traffic through another way until BIRDS stops to distribute these routes. I was able to configure BIRD to inject these routes with specified next-hop using internal BGP. But I also need it to work with external BGP. The problem is that the next-hop IP of injected routes is a directly connected network of the Cisco router and not BIRD's. BIRD doesn't know anything about this network. So the question is, is it possible to inject routes from BIRD to Cisco router using external BGP with next-hop IP address, which is not directly connected to the BIRD router? I should add that the BGP injection using external BGP works too, but only If the next-hop IP is a directly connected network od the BIRD router. Thank you for any advice. Jan Huňka Configuration of BIRD: protocol device { scan time 10; } protocol static static_10 { route 5.100.100.0/24 reject; } # filters section (DO NOT REMOVE!) filter filter_10 { if ( proto = "static_10" ) then { bgp_community.add((25511,444)); bgp_next_hop=3.100.100.1; accept; } else { reject; } } protocol bgp bgp_10 { local as 25511; neighbor Y.Y.Y.Y as 25512; import all; export filter filter_10; } Configuration of the bgp process on the CISCO router: router bgp 25512 neighbor X.X.X.X remote-as 25511 ! address-family ipv4 neighbor X.X.X.X activate no auto-summary !

2 1

RIP TTL security Ubuntu bug ?
by olivier a 07 Apr '15

07 Apr '15

Hi Trying to use 'ttl security enable' with RIP protocol in BIRD, I get : /etc/bird.conf, line 30, syntax error It happens on three machines : . Ubuntu 14.04 LTS / Bird installed by repository . Ubuntu 14.04 LTS / Bird installed with 1.4.5 sources compile . Raspbian OS, Bird installed with 1.4.5 sources compile I tried with different syntaxes ( enable, yes, on, .. ) with same pb Did I miss a compile option ? ttl security if functioning OK with BIRD/BGP Thanks for any insight :-)

2 2

BIRD / BGP / IPv6 / source address directive : auto vs link local vs GUA
by olivier a 04 Apr '15

04 Apr '15

Hi ! I'm learning BGP and I'm really puzzled about the 'source address' directive in the context of IPv6. I've seen some people explicit a GUA source address ( example : source address 2001:db8:0:0::1; ) Reading the documentation, watching the debug logs and playing with bird6c didn't help me understand. Leaving to auto ( no directive ) was functioning ok, but my BGP setup is rather simple. What is better ? No directive, link local or Global Unicast Address ? Thank you for any clue :-)

3 3

Modifying function called in filter does not take effect
by Eric Cables 01 Apr '15

01 Apr '15

I'm hoping someone can tell me whether this behavior is expected or not. I am using BIRD as a RR, and running into a behavior where modifying a policy, within a function called by a filter, requires a hard BGP session reset or stop/start of BIRD, rather than a 'configure soft.' Route Refresh is supported by the RR client. I am using a unique filter for each RR client; each filter calls a function that is shared amongst all filters -- basically matching routes that all RR clients should receive. This was first instantiated with a single BGP community match in the function, and a 'configure soft' worked fine. I then went back and added a second if statement to the function, expecting 'configure soft' to put the new policy into effect, but what I noticed is that the only way for RR clients to receive the newly accepted routes was to hard down/up the BGP session. Anecdotally, a 'show route filter router1_out' (after 'configure soft') did match the routes I was expecting the RR client to receive, but until the BGP session was hard cleared to the RR client, they were not advertised by BIRD. Here is the relevant configuration (I've bolded the new configuration that was added, which did not result in an advertisement to the RR client): # RR client template template bgp rr_client { description "Template for route reflector clients"; local as 65412; hold time 180; source address 2.2.2.2 ; rr client; rr cluster id 1.1.1.1; import all; export none; add paths; } # Globally reflected routes function function global_routes() { # Match 65000-65499,100-200 if bgp_community ~ [(65000..65499,100..200)] then accept; * # Match 65000-65499,300-400* * if bgp_community ~ [(65000..65499,300..400)] then accept;* } # Outbound filter for router1 filter router1_out { global_routes(); reject; } protocol bgp 'router1' from rr_client { neighbor 1.2.3.4 as 65412; import all; export filter router1_out; } As mentioned, the output of 'show route filter router1_out' (after a 'configure soft') did return the expected routes, but they were not advertised to the 'router1' RR client until the session was hard cleared. Is this expected behavior? -- Eric Cables

2 1