- Bird-users - Mailing Lists

looking for some help with bgp extended communities
by Warren Turkal 01 Dec '15

01 Dec '15

Hi networkers, I'd like to use bgp extended communities instead of communities for my routing policy so that I can use the 4-octet ASN. However, I am a bit confused by the route target vs route origin (and not having other kinds). Would it be appropriate to use the route origin (as opposed to the route target) kind of ECs to hold the community data that I will use for routing policies? Or maybe is there a way to use the generic 0x04 sub type instead of ro and rt kinds? Also, is it legitimate to use some private ASN for global communities that can be set by any of my routers when talking to one another? Thanks, wt

2 1

RR reflects customer routes, the route is not delivered to the forwarding table.
by 曾小小 01 Dec '15

01 Dec '15

Hi All, I have 3 routers connected like this. R1 （RR） / \ / \ （AS100） / \ R2 R3 (client_1） (client_2） I am using Ubuntu 14.04, bird version is 1.5.0 Between the R1, R2, R3 OSPF establish IGP full mesh. R1 is configured as RR, R1 and R2, R1 and R3 establish IBGP connections . R2 redistribute static routes via BGP, to AS100, R3 can receive routing information from R2, and R1 (RR) can also receive R2 advertised routing information, and delivered to the forwarding. If this routes by the R1 will be sent to the forwarding, it will directly affect the business. How to use the BIRD in BGP configuration commands let R1 is not delivered to the forwarding? another question: Also on the use of “next hop self”, and what is the use in BGP as well? I know that within an AS, if learned from EBGP routing information, you can modify the next hop address of the border router interface. ===== about r3 routeing information link this: 6.6.6.6/32 via 192.168.1.68 on vlan2 [bgp_r1 07:27:16 from 192.168.10.126] * (100/?) [i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 192.168.1.68 BGP.local_pref: 100 BGP.originator_id: 192.168.1.68 BGP.cluster_list: 1.1.1.1 all configuration information is as follows R1： ==== ##template about rr template bgp rr_client { debug { states,interfaces,events }; description "ibgp-rr1"; local 192.168.10.126 as 64600; multihop; rr client; rr cluster id 1.1.1.1; } filter bgp_out_r1 { if net ~ [ 6.6.6.6/32, 7.7.7.7/32 ] then accept; reject; } protocol bgp rr_r2 from rr_client { neighbor 192.168.1.68 as 64600; export filter bgp_out_r1; import all; #next hop self; } protocol bgp rr_r3 from rr_client { neighbor 192.168.2.69 as 64600; export filter bgp_out_r1; import all; #next hop self; } ==== R2： filter bgp_out_r2 { if net ~ [ 6.6.6.6/32, 7.7.7.7/32 ] then accept; reject; } protocol bgp bgp_r2 { debug { states,interfaces,events }; description "ibgp-rr1"; import all; export filter bgp_out_r2; local as 64600; neighbor 192.168.10.126 as 64600; source address 192.168.1.68; next hop self; } === R3: protocol bgp bgp_r3 { debug { states,interfaces,events }; description "ibgp-rr1"; import all; export all; local as 64600; neighbor 192.168.10.126 as 64600; source address 192.168.2.69; next hop self; }

2 1

pattern matching for bgp communities
by Job Snijders 25 Nov '15

25 Nov '15

Hi all, Is there a way to do pattern matching or regex matching on the BGP communities associated with a prefix? The use-case I have: an eBGP peer attaches communties which inform me both about the geographical point of origin and the type of relation my eBGP peer has with the remote network adjacent to them. In their scheme they treat the lower 16 bits of the BGP community as a string of sorts, where the first digit represents continent and the second digit the type of relation: so "65535:12" might mean (after removnig the '65535' part, "12" remains), the "1" signifies the continent (say europe), the "2" signifies the relation (say 'peering'). Should I want to accept all routes where the relation is equals say "3", I'd have to either create a list of all possible communities matching where relation is "3", you'd end up with something like this: function filter_rel_type() clist l; { l = [(65535, 3), (65535, 13), (65535, 23), (65535, 33), (65535, 43), (65535, 53), (65535, 63), (65535, 73), (65535, 83), (65535, 93)]; if l ~ bgp_community then return true; return false; } You can imagine that with more complex informational scheme's 'clist l' would grow to rather large proportions. Is there a more elegant way to accomplish this style of matching? Kind regards, Job

2 1

Advertise prefix without static
by David S. 22 Nov '15

22 Nov '15

Hi All, My name is David, I'm from Indonesia. I'm new on BGP and especially Bird. I configure FreeBSD 10.2 with Bird 1.5. I just want to know there is any way to advertise a network prefix without protocol static, please tell how if is it possible. I have read the documentation and I can't find any article that point me to my question. Thanks in advance. Best regards, David S. ------------------------------------------------ e. david(a)zeromail.us w. http://blog.pnyet.web.id

3 4

distribute /32 route via ospf?
by d tbsky 21 Nov '15

21 Nov '15

hi: I need to add some hosts to ospf topology. if i setup eth0 as 192.168.1.254/32 and add eth0 to ospf interface, it won't be distributed. however 192.168.1.254/31 works fine. I don't know if there are options I can use so bird would like to distribute /32 route? thanks for help!! Regards, tbskyd

2 1

Crash in Bird function kif_choose_primary()
by Wei Huang 20 Nov '15

20 Nov '15

I am using Bird on my system, and when I change config (use different interfaces for OSPF, from using tap-0, tap-4 to tap-0, tap-11) and restart Bird using "birdc restart all", I got a coredump in Bird with the following backtrace: (gdb) bt #0 kif_choose_primary (i=i@entry=0x66ce10) at krt.c:155 #1 0x000000000040be49 in ifa_recalc_primary (i=i@entry=0x66ce10) at ../../nest/iface.c:469 #2 0x000000000040c9f5 in ifa_delete (a=<optimized out>) at ../../nest/iface.c:579 #3 0x0000000000441649 in nl_parse_addr (h=h@entry=0x68c140, scan=scan@entry=0) at netlink.c:554 #4 0x000000000044182a in nl_async_msg (h=0x68c140) at netlink.c:979 #5 nl_async_hook (sk=<optimized out>, size=<optimized out>) at netlink.c:1026 #6 0x000000000043ba65 in sk_read (s=s@entry=0x68e150) at io.c:1831 #7 0x000000000043c2b2 in io_loop () at io.c:2187 #8 0x0000000000402ca1 in main (argc=<optimized out>, argv=<optimized out>) at main.c:844 I added some debug message and noticed the problem is the device protocol is restarting, and kif_shutdown is called, then as the backtrace shows it tries to delete the interface and call kif_choose_primary() while kif_proto is NULL at the time. I comment out that part of the code and noticed kif_start is called after those kif_choose_primary() calls. I am new to Bird code, so is this a Bird bug or I am not doing things correct (i.e. when change config, I shouldn't just call birdc restart all)? Wei

2 4

Socket error: TCP_MD5SIG: Cannot allocate memory
by Brian Rak 19 Nov '15

19 Nov '15

I have a machine running BIRD 1.4.5, and I'm seeing a lot of these messages when I start it up: 2015-08-24 15:54:26 <ERR> xxxx: Socket error: TCP_MD5SIG: Cannot allocate memory 2015-08-24 15:54:26 <ERR> yyyy: Socket error: TCP_MD5SIG: Cannot allocate memory It also seems like the sessions that report that error do not come up, and show a status of 'Error: Kernel MD5 auth failed'. I'm only trying to configure around 200 BGP sessions here, most of which are advertising a very small number of prefixes. I don't really see any tunable settings here, any suggestions as to how I can correct this?

4 7

FreeRTR
by Ondrej Filip 17 Nov '15

17 Nov '15

Ahoj! Videli uz jste tohle - http://freerouter.nop.hu/ Ve ctvrtek ma prezentaci na RIPE v ramci Open Source WG. Musim rict, ze jsem v soku, co vsechno ten clovek naprogramoval... Docela nas v mnoha vecech prebhel, i kdyz nechci srovnavat BIRDa a toto. F.

1 1

Is it possible to insert an MRT dump into BIRD routing tables ?
by Bahram 16 Nov '15

16 Nov '15

Hello there, I was wondering if it is possible to insert and replay an MRT dump (say BGP dump) of a router into the BIRD routing tables ? Thanks in advance. -- Best wishes, Bahram BahramBeigy http://www.bahrambeigy.ir

3 2

RIP with MD5 authentication
by Alex Lalik 12 Nov '15

12 Nov '15

Hello, I face a problem when configuring RIP with MD5 authentication in bird. I find no examples in configuring bird this way, so maybe this could be added to the documentation. This is the bird configuration I use: protocol kernel { scan time 20; # Scan kernel routing table every 20 seconds export all; # Default is export none learn; device routes; } protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol direct { interface "eth0"; } filter rip_export { # redistribute connected if ( source = RTS_DEVICE ) then { print "net accepted:", net; accept; } reject; } protocol rip RIP { debug all; honor neighbor; authentication md5; passwords { password "secret"; }; port 520; interface "eth0" { mode multicast; }; import all; export filter rip_export; } I tried to configure bird with the configuration above to connect to quagga (v0.99.23.1) and also to another instance of bird (v1.4.4 and v1.5.0). In both cases I get an error message in the logs that the authentication has failed: Nov 11 15:39:12 AVILA err bird: MD5 tail signature is not there Nov 11 15:39:12 AVILA err bird: RIP: Authentication failed In case I use plain configuration (authentication plaintext) instead of MD5 then the boxes connect successfully and routes are exchanged. Do I use a wrong RIP configuration or is this a bug in bird ? Best regards, Alexander Velkov

4 4