- Bird-users - Mailing Lists

selctive route download
by Harish Venkatraman 18 Jul '16

18 Jul '16

Hi, Can someone help me in selective route download using bird?. I did not see any specific configs. Secondly I don't want the routes learnt by bgp peers to be installed in the kernel but only routes that are stored in a file through some application to be downloaded to the kernel how do i do it?. The file can have both prefixes and next-hops or just prefixes? Any help is much appreciated. Thanks,

3 2

BGP communities attached to prefix issue
by Javor Kliachev 07 Jul '16

07 Jul '16

Hello, We use BIRD as route server with the well-known "BGP Community policy based filtering" as in most of all other IXP with the following type: * /Do not announce a prefix to a certain peer: 0:peer-as/ * /Announce a prefix to a certain peer: IXP_AS:peer-as/ * /Do not announce a prefix to any peer: 0:IXP_AS/ * /Announce a prefix to all peers: IXP_AS:IXP_AS/ But recently we came across the following case: A member of our IXP is sending his prefixes with attached a huge count of BGP communities ( ~ 750 pcs ) Each of the attached community has following type: 0:ASN ( peer-as ). We see that BIRD accepts these prefixes from member but it return the following error notification: 2016-06-30 10:06:59 <ERR> R0_248: Attribute list too long, skipping corresponding routes 2016-06-30 10:06:59 <ERR> R0_248: - route *x.x.x.0/24* skipped In the same time I'm able to see the prefixes that are exported fine to all member RIBs(for which there is no prohibiting with 0:ASN) via pipes but in spite of that , the prefix is not advertised to any peer over eBGP protocol. In addition at the same time I'm able to see that the prefixes persist into the RIB and BIRD shows that they're advertised but obviously this is not a true. Here is the output with a brief explanation of our scenario:* *R0_248**- protocol BGP of member that should accept the prefixes R0_132 - protocol BGP of the member that sends the prefixes with the huge count of communities. 10.0.0.132 - the peer from protocol R0_132 T60230 - connected table to R0_248 Prefix: *x.x.x.0/24* - prefix with ~750 communities. /# birdc "show route export R0_248 //*x.x.x.0/24*//all"/ *x.x.x.0/24* via 10.0.0.132 on eth0 [R0_132 10:01:33] * (100) [ASxxxxi] Type: BGP unicast univ BGP.origin: IGP /BGP.as_path: yyyy xxxx/ BGP.next_hop: 10.0.0.132 BGP.med: 1000 BGP.local_pref: 100 BGP.community: (64700,44217) (1,1082) (65400,65400) (65400,0) (0,42) (0,251) (0,286) (0,553) (0,680) (0,702) (0,714) (0,1239) (0,1241) (0,1248) (0,1267) (0,1273) (0,1547) (0,1668) (0,1680) (0,1764) (0,2119) (0,2484) (0,2603) (0,2613) (0,2635) (0,2686) (0,2818) (0,2828) (0,2854) (0,2857) (0,2906) (0,2914) (0,3209) (0,3216) (0,3223) (0,3225) (0,3252) (0,3255) (0,3257) (0,3292) (0,3303) (0,3320) (0,3327) (0,3356) (0,3491) (0,3549) (0,3561) (0,3741) (0,3786) (0,3856) (0,3910) (0,4134) ...................................................................... ...................................................................... ...................................................................... (0,4589) (0,4637) (0,4651) (0,4657) (0,4766) (0,4788) (0,4809) (0,5089) (0,5391) (0,5400) (0,5404) (0,5409) (0,5410) (0,5413) (0,5430) (0,5466) (0,5483) (0,5539) (0,5563) (0,5578) (0,5588) (0,5603) (0,5605) (0,5713) (0,6083) (0,60280) (0,60294) (0,60404) (0,60447) (0,60764) (0,60868) (0,61186) (0,61244) (0,61266) (0,61317) (0,61438) (0,61955) (0,62023) (0,62044) (0,62093) (0,62325) (0,62336) (0,62363) (0,62955) (0,63199) (0,63311) (0,63949) (0,64597) (44217,1039) (44217,1049) (44217,1053) (44217,1064) (44217,1074) (44217,9101) # birdc "show route table T60230 /*x.x.x.0/24*/" /*x.x.x.0/24*/ via 10.0.0.132 on eth0 [R0_132 10:01:33] * (100) [ASxxxxi] Our BIRD version is 1.4.5 We have tried with the latest 1.6.0 but there is no effect. Furthermore during our troubleshooting as a separate issue we have observed that we can't add more than ~505 communities to a given prefix. I hope this information will be useful for resolving this issue. Any ideas or thoughts are highly appreciated! Thanks in advance! -- Javor Kliachev Senior IP Engineer tel: +359 2 975 16 16; fax: +359 2 975 34 36; mob: +359 885 988 495; web: www.neterra.net <https://bg.linkedin.com/pub/javor-kliachev/11/b46/843>

3 3

BGP- bad message length error..
by Harish Venkatraman 07 Jul '16

07 Jul '16

I am using bird 1.6.0 and tried to establish ibgp session iam getting the following error. The local as is 60. when do we get this error? Any help is much appreciated. Jul 06 23:53:46 linux-01 systemd[1]: Started BIRD Internet Routing Daemon (IPv4). Jul 06 23:53:46 linux-01 bird[3625]: Started Jul 06 23:53:46 linux-01 bird[3625]: 2016-07-06 23:53:46 <INFO> Started Jul 06 23:54:08 linux-01 bird[3625]: bgp_60: Error: Bad message length: 0037 Jul 06 23:54:08 linux-01 bird[3625]: 2016-07-06 23:54:08 <RMT> bgp_60: Error: Bad mess...037

3 2

ifname in filters
by Alexander Velkov 04 Jul '16

04 Jul '16

Hello, I would like to configure RIP with different ACLs set on different RIP interfaces. For this purpose I thought I could use the '*ifname*' route attribute in bird filters. The problem I am facing is that when I use it, no RIP routes are announced at all, so maybe I am using a wrong syntax. If I don't use the *ifname = "eth0" *I see the following sent from the bird's RIP instance (10.0.4.1 is configured on eth1 and 172.16.0.4 on eth0). I would like the 10.2.4.1/32 route to be announced through eth0 only. I have also tried to use the *ifname ~ "eth0" *syntax with no luck. *tcpdump:* # tcpdump -i any -vvnn port 520 tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes 13:02:58.664760 IP (tos 0xc0, ttl 1, id 27713, offset 0, flags [none], proto UDP (17), length 52) *10.0.4.1.520* > 224.0.0.9.520: [udp sum ok] RIPv2, Response, length: 24, routes: 1 or less AFI IPv4, *10.2.4.1/32 <http://10.2.4.1/32>*, tag 0x0000, metric: 1, next-hop: self 0x0000: 0202 0000 0002 0000 0a02 0401 ffff ffff 0x0010: 0000 0000 0000 0001 13:03:14.686163 IP (tos 0xc0, ttl 1, id 27714, offset 0, flags [none], proto UDP (17), length 52) *172.16.0.4.520* > 224.0.0.9.520: [udp sum ok] RIPv2, Response, length: 24, routes: 1 or less AFI IPv4, *10.2.4.1/32 <http://10.2.4.1/32>*, tag 0x0000, metric: 1, next-hop: self 0x0000: 0202 0000 0002 0000 0a02 0401 ffff ffff 0x0010: 0000 0000 0000 0001 *bird config:* protocol kernel { # persist; # Don't remove routes on BIRD shutdown scan time 20; # Scan kernel routing table every 20 seconds export all; # Default is export none learn; device routes; } protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol direct { interface "*"; } filter rip_export { # redistribute connected + RIP + ACL if ( ( source = RTS_DEVICE || source = RTS_RIP ) && ( net ~ 10.2.4.0/24 && *ifname = "eth0"* ) ) then { print "net export accepted: ", net; accept; } reject; } protocol rip RIP { debug all; interface "eth0" {mode multicast; split horizon yes; poison reverse no; }; interface "eth1" {mode multicast; split horizon yes; poison reverse no; }; import all; export filter rip_export; } Any help would be appreciated, thank you. Alex

2 3

Re: ifname in filters
by Alexander Velkov 04 Jul '16

04 Jul '16

Just for clarification, this is what I try to achieve 'translated' for use with quagga (ripd): ... access-list filter1 permit 10.2.4.0/24 access-list filter1 deny 0.0.0.0/0 ! interface eth0 interface eth1 ! router rip network eth0 distribute-list filter1 out eth0 network eth1 redistribute connected ... On Mon, Jul 4, 2016 at 3:49 PM, Alexander Velkov <alvel85(a)googlemail.com> wrote: > Hello, > > I would like to configure RIP with different ACLs set on different RIP > interfaces. For this purpose I thought I could use the '*ifname*' route > attribute in bird filters. The problem I am facing is that when I use it, > no RIP routes are announced at all, so maybe I am using a wrong syntax. > > If I don't use the *ifname = "eth0" *I see the following sent from the > bird's RIP instance (10.0.4.1 is configured on eth1 and 172.16.0.4 on > eth0). I would like the 10.2.4.1/32 route to be announced through eth0 > only. I have also tried to use the *ifname ~ "eth0" *syntax with no luck. > > > > > *tcpdump:* > # tcpdump -i any -vvnn port 520 > tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture > size 65535 bytes > 13:02:58.664760 IP (tos 0xc0, ttl 1, id 27713, offset 0, flags [none], > proto UDP (17), length 52) > *10.0.4.1.520* > 224.0.0.9.520: [udp sum ok] > RIPv2, Response, length: 24, routes: 1 or less > AFI IPv4, *10.2.4.1/32 <http://10.2.4.1/32>*, tag > 0x0000, metric: 1, next-hop: self > 0x0000: 0202 0000 0002 0000 0a02 0401 ffff ffff > 0x0010: 0000 0000 0000 0001 > 13:03:14.686163 IP (tos 0xc0, ttl 1, id 27714, offset 0, flags [none], > proto UDP (17), length 52) > *172.16.0.4.520* > 224.0.0.9.520: [udp sum ok] > RIPv2, Response, length: 24, routes: 1 or less > AFI IPv4, *10.2.4.1/32 <http://10.2.4.1/32>*, tag > 0x0000, metric: 1, next-hop: self > 0x0000: 0202 0000 0002 0000 0a02 0401 ffff ffff > 0x0010: 0000 0000 0000 0001 > > *bird config:* > > protocol kernel { > # persist; # Don't remove routes on BIRD shutdown > scan time 20; # Scan kernel routing table every 20 seconds > export all; # Default is export none > learn; > device routes; > } > > protocol device { > scan time 10; # Scan interfaces every 10 seconds > } > > protocol direct { > interface "*"; > } > > filter rip_export { > # redistribute connected + RIP + ACL > if ( ( source = RTS_DEVICE || source = RTS_RIP ) && > ( net ~ 10.2.4.0/24 && *ifname = "eth0"* ) ) then { > print "net export accepted: ", net; > accept; > } > > reject; > } > > protocol rip RIP { > debug all; > > interface "eth0" {mode multicast; split horizon yes; poison reverse no; > }; > interface "eth1" {mode multicast; split horizon yes; poison reverse no; > }; > > import all; > export filter rip_export; > } > > Any help would be appreciated, thank you. > > Alex >

1 0

Re: RIP with MD5 authentication
by Alexander Velkov 29 Jun '16

29 Jun '16

ok great, thank you for your answer! On Thu, Nov 12, 2015 at 7:01 PM, Ondrej Zajicek <santiago(a)crfreenet.org> wrote: > On Thu, Nov 12, 2015 at 05:25:18PM +0100, Alexander Velkov wrote: > > Hi Ondrej, > > > > thank you for your reply! > > > > When is this branch planned to be integrated to main? > > I guess we will release a new version of BIRD containing RIP from rip-new > branch during 2015-12 or 2016-01. > > -- > Elen sila lumenn' omentielvo > > Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) > OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) > "To err is human -- to blame it on a computer is even more so." >

3 7

OSPF passive-interface
by Alexander Velkov 28 Jun '16

28 Jun '16

Hi again, in the quagga configuration you can configure a interface to be passive (participate in the OSPF routing process but prevents that interface from forming neighbor relationships). I cannot find a configuration parameter for that in the bird OSPF configuration. There is one for RIP and BGP but not for OSPF. How is this logic solved in bird ? Regards, Alex

1 1

bird does not speak OSPF on a GRE tunnel interface
by Alexander Velkov 28 Jun '16

28 Jun '16

Hello, Could you please help with an OSPF configuration. I have configured a GRE tunnel between two peers - '172.16.0.9' and '172.16.0.4'. I configured then a local address on the newly created tunnel interface '172.16.1.1'. I would like to configure bird to speak on the GRE interface. I tried with the following configuration but I cannot see that bird is announcing anything: *# ifconfig* eth0 Link encap:Ethernet HWaddr 00:D0:12:05:C6:D6 inet addr:172.16.0.4 Bcast:172.16.0.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:12613 errors:0 dropped:1 overruns:0 frame:0 TX packets:9503 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:1237627 (1.1 MiB) TX bytes:2152677 (2.0 MiB) eth1 Link encap:Ethernet HWaddr 00:D0:12:06:C7:D7 inet addr:10.0.4.1 Bcast:10.0.4.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:294 errors:0 dropped:1 overruns:0 frame:0 TX packets:421 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:53820 (52.5 KiB) TX bytes:97344 (95.0 KiB) *gretesttunnel* Link encap:UNSPEC HWaddr AC-10-00-04-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:172.16.1.2 P-t-P:172.16.1.1 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:8 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:320 (320.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) *bird config:* protocol kernel { # persist; # Don't remove routes on BIRD shutdown scan time 20; # Scan kernel routing table every 20 seconds export all; # Default is export none learn; device routes; } protocol device { scan time 10; # Scan interfaces every 10 seconds } #protocol direct { # interface "*"; # export all; #} protocol ospf OSPF { rfc1583compat; export all; import all; area 172.16.0.0 { networks { *172.16.1.0/24 <http://172.16.1.0/24>;* }; } Thanks in advance! Alexander Velkov

2 4

Dynamic BGP neighbors ?
by Jonan S 28 Jun '16

28 Jun '16

Hello, Does BIRD support anything like dynamic BGP neighbors ? I would like to establish sessions from neighbors that are unknown ahead of time, such as from a range of IPs or adhoc addresses. Thanks, -Jonan

2 1

Re: bird does not speak OSPF on a GRE tunnel interface
by Alexander Velkov 27 Jun '16

27 Jun '16

Hi Michael, thank you for your answer! When I explicitly define the tunnel interface as an OSPF interface, then I see that bird 'talks' on it. That is very nice, thanks! Best regards, Alex On Mon, Jun 27, 2016 at 2:57 PM, Michael Lechtermann < michael(a)lechtermann.net> wrote: > Hi, > > I have bird working over are just fine, I am using OpenBSD though instead > of Linux. > > The below example config works for me. Also make sure you allow GRE and > OSPF packets through your firewall. > > Regards, > Michael > > > # ifconfig gre0 inet > gre0: flags=9011<UP,POINTOPOINT,LINK0,MULTICAST> mtu 1400 > priority: 0 > groups: gre > tunnel: init x.x.x.x -> y.y.y.y > init a.a.a.a --> a.a.a.b netmask 0xfffffffc > > > # grep -ve ^# -e ^$ /etc/bird.conf > router id x.x.x.x; > protocol kernel { > scan time 20; # Scan kernel routing table every 20 > seconds > export all; # Default is export none > } > protocol device { > scan time 10; # Scan interfaces every 10 seconds > } > protocol static { > } > protocol ospf MyOSPF { > tick 2; > import all; > export all; > area 0.0.0.0 { > stub no; > interface "lo0" { stub; }; > interface "gre0" { > cost 125; > priority 253; > type broadcast; > check link yes; > }; > }; > } >

1 0