- Bird-users - Mailing Lists

08 Apr '10

Hi all, I'm trying to use the RIP protocol of BIRD in MD5 authentication mode. I use bird version 1.2.1. While checking interoperability with quagga (i use for this the zeroshell distribution running quagga ripd 0.98.4) md5 authentication failed with the message: "MD5 tail signature is not there". I then used Wireshark to capture a rip response packet sent by bird and found that the MD5 authentication data trailer starts with "FFFF 0100". The same packet from quagga ripd starts with "FFFF 0001". Looking in the RFC2082, the value from quagga seems to be the right one. historically, the value "FFFF 0001" was used by bird but this was changed to "FFFF 0100" in a patch resolving "RIP authentication problem with cisco". So can someone tell me was is the right value? Following RFC2082, it seems that we should use "FFFF 0001" but i don't have cisco products and don't want to break cisco compatibility.... regards, Jean PEREIRA

2 2

Problems with "rr cluster id"
by Neil Davidson 08 Apr '10

08 Apr '10

Working with a new BIRD 1.2.1 build and am trying to get route reflection set up. I cannot get BIRD to accept the "rr cluster id" command. I get the following error message ... /usr/local/etc/bird.conf, line 10: syntax error Following is my complete configuration file ... ------------------------------------------------------------------- router id 69.16.134.148; log "/usr/local/var/log/bird.log" all; protocol bgp r1_aa { local as 65000; neighbor 69.16.134.1 as 65000; multihop 5 via 69.16.134.145; password "test"; rr cluster id 1.1.1.1; rr client; next hop self; } ------------------------------------------------------------------- Thanks in advance for any help ... Neil

2 1

BGP path selection
by David J Craigon 29 Mar '10

29 Mar '10

Hello, Here's what I want to do. I've got bird running BGP to two transit network providers. I want my path selection to be like this: 1) Choose the shortest AS path. 2) If the AS path is equal in length, prioritise one provider (the cheaper one!) over the other. Possible, or not? I can do it with local priority, but then all traffic goes down one provider. I want to supply the tiebreaker when it comes to equal length AS paths. David

2 1

RPM config file
by David J Craigon 28 Mar '10

28 Mar '10

Hello guys, On your bird RPM, you need to mark /etc/bird.conf as %conf, otherwise when you upgrade bird using the RPM, it eats your config file. David

2 1

OSPF & Ring network
by Jeremy Evans 26 Mar '10

26 Mar '10

I have a group of devices which are required to have a redundant communication path in the event of a link failure. Due to legacy & cost reasons the network uses serial PPP links between devices as follows: +---+----+---+ | |eth0| | | +----+ | | 1 | +----+ +----+ |ppp0| |ppp1+-----+ +-+--+--+----+ | | | | | +---+----+---+ | | | |eth0| | | | | +----+ | | | | 2 | | | +----+ +----+ | +----+ppp0| |ppp1| | +----+--+--+-+ | | | +---+----+---+ | | | |eth0| | | | | +----+ | | | | 3 | | | +----+ +----+ | +--+ppp1| |ppp0+----------------+ +----+--+----+ This shows the simplest case; the loop will be larger in most cases. The eth0 ports will generally not be used, but we'd like the flexibility to plug into a random eth0 port to access any point on the loop. Ignoring the eth0's for the moment, I'm having trouble persuading OSPF to generate *any* routing/neighbour/topology information for the PPP links. My config file is this: protocol kernel { learn off; persist on; scan time 20; export all; } protocol device { scan time 10; } protocol direct { interface -"eth*"; } protocol ospf { export all; import all; area 0.0.0.0 { interface 10.0.0.0/8 { wait 15; type nonbroadcast; # no change if omitted strict nonbroadcast on; # no change if omitted cost 100; authentication none; retransmit 7; }; }; } All the PPP's are static IP in 10.0.0.0/8 (eg 10.0.1.2 is ppp1 on node 2). I'm seeing Hello packets (sent to 224.0.0.5) on the nodes, but there's not a lot going on otherwise. I've tried explicitly setting neighbors (giving the IP addresses of the 2 adjacent PPP ports), but this has no effect either. "show route" (on node 3) from birdc gives me this: 10.0.1.2/32 dev ppp0 [direct1 09:47] * (240) 10.0.0.1/32 dev ppp1 [direct1 09:47] * (240) 192.168.1.0/24 dev eth0 [direct1 09:47] * (240) 127.0.0.0/8 dev lo [direct1 09:47] * (240) which is a start, I think, but there's no corresponding information in the kernel routing table. Any obvious pointers for an OSPF newbie? Jeremy Evans

2 4

minor bird crash
by Wolfgang Hennerbichler 23 Mar '10

23 Mar '10

Hi, I'm having my bird6 nearly up and running, and just stumbled across the following minor crash. I have a filter defined like this: filter bgp_in_AS1853x104 prefix set allnet; { if ! defined (bgp_med) then bgp_med = 0; if ! (avoid_martians()) then reject; if ! (bgp_path ~ [= 1853 * =]) then reject; if ! (net ~ allnet) then { bgp_community.add((1121,1)); } accept; } You see that I compare allnet to the current net, but allnet isn't set anywhere (due to my forgetfulness). Having this filter in place crashes bird upon the first received route. This is of course rather a human error, and I just wanted to tell the Ondrej's in case they want to fix this bug. I personally don't care if they do, I guess there are more ways of a broken configuration to break bird :) Wolfgang, all excited about his working bird6. -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

3 16

Feature-Request: Syslog-name of Bird6
by Wolfgang Hennerbichler 22 Mar '10

22 Mar '10

Good Morning Ondrej & Ondrej, would it be possible to let bird6 log with the bird6 prefix to syslog instead of bird? This would make debugging a little easier, as we run bird and bird6 on the same machine, and it's not too easy to determine which bird is logging what. I guess this would be trivial to accomplish without looking at the sources. Wolfgang -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

5 7

Re: Touble ospf md5 authentication
by Ondrej Zajicek 22 Mar '10

22 Mar '10

On Fri, Mar 19, 2010 at 05:52:04PM +0159, Vitaliy Kolodinsky wrote: > In area 0.0.0.2 works some Cisco routers, Quagga and experimental > BIRD. Cisco and Quagga work perfectly together. > Cisco at the end of OSPF Hello packet sent LLS Data Block. > Quagga this unit is not sending. > LLS Data Block is mentioned in the IETF RFC 4813 > May participate in the testing. Hello Could you try attached patch to BIRD 1.2.1? That should fix this issue. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

2 3

<ERR> filters, line 1: Can't operate with values of incompatible types
by Arnold Nipper 22 Mar '10

22 Mar '10

Is there a way how I could debug 2010-03-21 19:08:12 <ERR> filters, line 1: Can't operate with values of incompatible types 2010-03-21 19:08:12 <ERR> filters, line 1: Can't operate with values of incompatible types 2010-03-21 19:08:12 <ERR> ... any further? TIA, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333

3 2

Re: Touble ospf md5 authentication
by Ondrej Zajicek 20 Mar '10

20 Mar '10

On Fri, Mar 19, 2010 at 05:52:04PM +0159, Vitaliy Kolodinsky wrote: > > Hmm, it seems that Cisco just sends some trash after the end of OSPF packet. > > Perhaps it would suffice to remove the check in BIRD, but i personally > > don't test this compatibility. > > In area 0.0.0.2 works some Cisco routers, Quagga and experimental > BIRD. Cisco and Quagga work perfectly together. > Cisco at the end of OSPF Hello packet sent LLS Data Block. > Quagga this unit is not sending. > LLS Data Block is mentioned in the IETF RFC 4813 > May participate in the testing. Yes, LLS data blocks in OSPF packets is the cause of the problem. Thank you for a note, i didn't know about RFC 4813. I will look at this issue and send you the patch for BIRD to be able to handle LLS data blocks. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

3 4