- Bird-users - Mailing Lists

None
by None 13 Jun '26

13 Jun '26

How to prevent unneeded routing update to kernel?

1 0

None
by None 13 Jun '26

13 Jun '26

destination host is administratively prohibited. Have u guys encountered this issue? All other BGP with other peering are working ok. Below is the log from ASR.. Logs from ASR ------------- RP/0/RP0/CPU0:Mar 29 07:48:19.078 UTC: bgp[1044]: %ROUTING-BGP-5-ADJCHANGE : neighbor 119.27.63.253 Up (VRF: default) RP/0/RP0/CPU0:Mar 29 07:49:53.328 UTC: tcp[355]: %IP-TCP_NSR-5-DISABLED : 119.27.63.38:28514 <-> 119.27.63.253:179:: NSR disabled for TCP connection because Retransmission threshold exceeded RP/0/RP0/CPU0:Mar 29 07:49:53.343 UTC: bgp[1044]: %ROUTING-BGP-3-NBR_NSR_DISABLED : NSR disabled on neighbor 119.27.63.253 due to TCP retransmissions RP/0/RP1/CPU0:Mar 29 07:49:53.357 UTC: bgp[1044]: %ROUTING-BGP-5-NBR_NSR_DISABLED_STANDBY : NSR disabled on neighbor 119.27.63.253 on standby due to Peer closing down the session (VRF: default) Thanks, Jimmy

1 0

None
by None 13 Jun '26

13 Jun '26

I want to announce 2001:db8:2177::/48, which also needs to be in the kernel routing table as a blackhole, and also 2001:db8:30a9:ffff::/64, which is a subnet of 2001:db8:30a9::/48. Static protocol is used to also blackhole the 2001:db8:30a9::/48. Traffic for this 2001:db8:30a9::/48 besides the /64 we announce at this point will flow into AS64515 via another router that is connected to AS65517 and which is announcing the whole 2001:db8:30a9::/48 Anyway... router id 1.3.3.7; debug protocols { states, routes, filters, interfaces } protocol kernel { persist; scan time 60; import none; export all; } protocol device { scan time 60; } protocol static { import all; route 2001:db8:30a9::/48 via "dummy0"; route 2001:db8:2177::/48 via "dummy0"; } template bgp template_bgp { local as 64515; import all; export all; route limit 1000; } template pipe template_pipe { table master; mode transparent; } table T65517; filter bgp_pipe_T65517_to_master { if net = ::/0 then accept; reject; } filter bgp_pipe_master_to_T65517 { if net = 2001:db8:2177::/48 then accept; reject; } protocol pipe P65517 from template_pipe { peer table T65517; import filter bgp_pipe_T65517_to_master; export filter bgp_pipe_master_to_T65517; } protocol static static_bgp_T65517 { table T65517; import all; route 2001:db8:30a9:ffff::/64 via "dummy0"; } protocol bgp bgp_example_peer from template_bgp { table T65517; source address 2001:db8:2000:1::202; neighbor 2001:db8:2000:1::201 as 65517; } Note that the /64 route is directy injected into T65517, because it only has to be used inside the BGP announcement. I don't know if this is the best way, as I'm obviously still learning to find out, but it works (tm). Now when the context is clear... let's start bird with this config file... bird6: kernel1: Initializing bird6: device1: Initializing bird6: static1: Initializing bird6: P65517: Initializing bird6: static_bgp_T65517: Initializing bird6: bgp_example_peer: Initializing bird6: device1: Starting bird6: device1: Connected to table master bird6: device1: State changed to feed bird6: kernel1: Starting bird6: kernel1: Connected to table master bird6: kernel1: State changed to feed bird6: static1: Starting bird6: static1: Connected to table master bird6: static1: State changed to feed bird6: P65517: Starting bird6: P65517: Connected to table master bird6: P65517: Connected to table T65517 bird6: P65517: State changed to feed bird6: static_bgp_T65517: Starting bird6: static_bgp_T65517: Connected to table T65517 bird6: static_bgp_T65517: State changed to feed bird6: bgp_example_peer: Starting bird6: Started bird6: device1: State changed to up bird6: kernel1: State changed to up bird6: static1 < interface lo goes up bird6: static1 < interface eth0 goes up bird6: static1 < interface eth1 goes up bird6: static1 < interface eth2 goes up bird6: static1 < interface eth3 goes up bird6: static1 < interface dummy0 created bird6: static1: State changed to up bird6: P65517: State changed to up bird6: static_bgp_T65517 < interface lo goes up bird6: static_bgp_T65517 < interface eth0 goes up bird6: static_bgp_T65517 < interface eth1 goes up bird6: static_bgp_T65517 < interface eth2 goes up bird6: static_bgp_T65517 < interface eth3 goes up bird6: static_bgp_T65517 < interface dummy0 created bird6: static_bgp_T65517: State changed to up bird6: bgp_example_peer: Connected to table T65517 bird6: bgp_example_peer: State changed to feed bird6: bgp_example_peer: State changed to up bird6: bgp_example_peer > added [best] ::/0 via 2001:db8:2000:1::201 on eth0 bird6: P65517 < added ::/0 via 2001:db8:2000:1::201 on eth0 bird6: P65517 > added [best] ::/0 via 2001:db8:2000:1::201 on eth0 bird6: P65517 < rejected by protocol ::/0 via 2001:db8:2000:1::201 on eth0 bird6: kernel1 < added ::/0 via 2001:db8:2000:1::201 on eth0 bird6: bgp_example_peer < rejected by protocol ::/0 via 2001:db8:2000:1::201 on eth0 BGP session is established, we get the predicted ::/0 route from the remote AS. bird> show route table T65517 ::/0 via 2001:db8:2000:1::201 on eth0 [bgp_example_peer 00:33] * (100) [AS3265i] bird> show route table master ::/0 via 2001:db8:2000:1::201 on eth0 [bgp_example_peer 00:41] * (100) [AS3265i] But!... the static routes are not in the system. I don't see the /48's and /64 anywhere... Let's gently reload the same (!) configuration file again... bird> configure soft Reading configuration from /etc/bird6.conf Reconfigured bird6: Reconfiguring bird6: kernel1: Reconfigured bird6: device1: Reconfigured bird6: static1 > added [best] 2001:db8:30a9::/48 dev dummy0 bird6: P65517 < filtered out 2001:db8:30a9::/48 dev dummy0 bird6: kernel1 < added 2001:db8:30a9::/48 dev dummy0 bird6: static1 > added [best] 2001:db8:2177::/48 dev dummy0 bird6: P65517 < added 2001:db8:2177::/48 dev dummy0 bird6: P65517 > added [best] 2001:db8:2177::/48 dev dummy0 bird6: P65517 < rejected by protocol 2001:db8:2177::/48 dev dummy0 bird6: bgp_example_peer < added 2001:db8:2177::/48 dev dummy0 bird6: kernel1 < added 2001:db8:2177::/48 dev dummy0 bird6: static1: Reconfigured bird6: P65517: Reconfigured bird6: static_bgp_T65517 > added [best] 2001:db8:30a9:ffff::/64 dev dummy0 bird6: P65517 < filtered out 2001:db8:30a9:ffff::/64 dev dummy0 bird6: bgp_example_peer < added 2001:db8:30a9:ffff::/64 dev dummy0 bird6: static_bgp_T65517: Reconfigured bird6: bgp_example_peer: Reconfigured bird6: Reconfigured bird> show route table T65517 ::/0 via 2001:db8:2000:1::201 on eth0 [bgp_example_peer 00:41] * (100) [AS3265i] 2001:db8:30a9:ffff::/64 dev dummy0 [static_bgp_T65517 00:48] * (200) 2001:db8:2177::/48 dev dummy0 [static1 00:48] * (200) bird> show route table master ::/0 via 2001:db8:2000:1::201 on eth0 [bgp_example_peer 00:41] * (100) [AS3265i] 2001:db8:2177::/48 dev dummy0 [static1 00:48] * (200) 2001:db8:30a9::/48 dev dummy0 [static1 00:48] * (200) And tadaa.wav: # ip -6 r list proto bird 2001:db8:2177::/48 dev dummy0 metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295 2001:db8:30a9::/48 dev dummy0 metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295 default via 2001:db8:2000:1::201 dev eth0 metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295 My question is: what's going on here? Why are the static routes not fed into bird at startup, but only after I reload the unchanged configuration? Have I overlooked a configuration detail, or is there something else 'fishy' going on? Thanks, -- Hans van Kranenburg - System / Network Engineer T +31 (0)10 2760434 | hans.van.kranenburg(a)mendix.com | www.mendix.com

1 0

None
by None 13 Jun '26

13 Jun '26

26-07-2012 08:57:38 <WARN> OSPF: LSA disappeared (Type: 0003, Id: 10.0.95.236, Rt: 172.31.1.13) 26-07-2012 08:57:43 <WARN> OSPF: LSA disappeared (Type: 0003, Id: 10.0.95.236, Rt: 172.31.1.13) This was filling log, until that interface on other router was up again. OSPF setup is quite simple, Bird is in default area 0.0.0.0, route 10.0.95.236 is on router in different area (totaly stub) for which router 172.31.1.13 is ABR. Why is Bird repeatedly logging "LSA disappear" for same prefix? Could this be disabled in some way? Or have I something wong in Bird config? OSPF protocol config is realy simple: protocol ospf ospfbackbone { import all; export filter doospf; area 0.0.0.0 { interface 172.31.1.0/24 { cost 10; hello 10; retransmit 5; priority 250; dead 40; type broadcast; authentication cryptographic; password "hidden"; }; #int }; #area } Thanks for response. With regards Pavel Zichovsky

1 0

None
by None 13 Jun '26

13 Jun '26

'transit2.web4u.cz' (81.91.80.100) which responds to those networks but not for anything on AS 13285. Not sure which side is the problem. Could you get your end checked? Thanks Neil

1 0

None
by None 13 Jun '26

13 Jun '26

much less work. Some MPLS structure/macro abstraction layer will be required, though.

1 0

None
by None 13 Jun '26

13 Jun '26

itself until I disabled/enabled radv protocol. The dual-stack ppp session on interface ppp243 ended and after 9 sec. another session which is only ipv4 started on same interface ppp243. Radv tries to send RA on interface ppp243 which now is not v6-enabled. So is like you said. What can be done ? thx, --0015177407d460d95f04a7d14fdd Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div class=3D"gmail_quote">On Mon, Jul 11, 2011 at 6:27 PM, Ondrej = Zajicek <<a href=3D"mailto:santiago@crfreenet.org">san= tiago(a)crfreenet.org</a>> wrote: <blockquote class=3D"gmail_quo= te" style=3D"margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204= , 204); padding-left: 1ex;"> <div class=3D"im">On Mon, Jul 11, 2011 at 05:06:49PM +0300, Bogdan Besliu w= rote: > =A0 =A0and the last messages repeats itself until hdd is full; or bird= 6 daemon > =A0 =A0stop working. > =A0 =A0it looks like the problems appear when radv tries to send RA an= d at the > =A0 =A0same time ppp interface goes down. > > =A0 =A0any ideas ? </div>One possible idea is that ppp iface remains up, but its link-local<br= > address was removed, is this possible? (or at least BIRD thinks it is still up). Could you enable debug messages using "debug all { interfaces }" command? </blockquote><div>Hello Ondrej, </div>Here are the logs with= debug=A0 all { interfaces } enabled: <div> Jul 11 19:30:42 ppp-test = pppd[2515]: Using interface ppp243 Jul 11 19:30:42 ppp-test pppd[2515]: = local=A0 LL address fe80::0000:0000:0000:0001 Jul 11 19:30:42 ppp-test pppd[2515]: remote LL address fe80::0000:0000:567a= :ec93 Jul 11 19:30:42 ppp-test pppd[2515]: remote IP address 192.168.67.= 30 ...... Jul 11 19:39:21 ppp-test pppd[2515]: LCP terminated by peer= Jul 11 19:39:21 ppp-test pppd[2515]: Connect time 8.7 minutes. Jul 11 19= :39:21 ppp-test pppd[2515]: Sent 3618619 bytes, received 872185 bytes. J= ul 11 19:39:21 ppp-test pppd[2515]: Terminating on signal 15 Jul 11 19:3= 9:30 ppp-test pppd[5023]: Using interface ppp243 ......... Jul 11 19:39:30 ppp-test pppd[5023]: remote IP address 192.168= .67.20 ........ 11-07-2011 19:39:21 <TRACE> radv1 < seco= ndary address fe80::/10 on interface ppp243 removed 11-07-2011 19:39:21 = <TRACE> radv1 < primary address 2001:1111:1111:1::/64 on interface= ppp243 removed 11-07-2011 19:39:21 <TRACE> static1 < interface ppp243 goes down<b= r>11-07-2011 19:39:21 <TRACE> radv1 < interface ppp243 goes down<b= r>11-07-2011 19:39:30 <TRACE> static1 < interface ppp243 changes M= TU 11-07-2011 19:39:30 <TRACE> radv1 < interface ppp243 changes MTU<b= r>11-07-2011 19:39:30 <ERR> radv1: Socket error: Network is unreachab= le 11-07-2011 19:39:31 <TRACE> static1 < interface ppp243 chang= es link 11-07-2011 19:39:31 <TRACE> radv1 < interface ppp243 changes link<= br>11-07-2011 19:39:31 <TRACE> static1 < interface ppp243 changes = link 11-07-2011 19:39:31 <TRACE> radv1 < interface ppp243 chang= es link 11-07-2011 19:39:32 <ERR> radv1: Socket error: Network is unreachable= </div><div>From that moment the error=A0 "Socket error: Ne= twork is unreachable" repeats itself until I disabled/enabled radv pro= tocol. </div></div>The dual-stack ppp session on interface ppp243 ended and after = 9 sec. another session which is only ipv4 started on same interface ppp243.= Radv tries to send RA on interface ppp243 which now is not v6-enabled. So = is like you said. What can be done ? thx, --0015177407d460d95f04a7d14fdd--

1 0

None
by None 13 Jun '26

13 Jun '26

internet exchange points. How to write filter for BGP_Peer5 to export only routes wich I get from Peers 1,2,3 (only routes to ix points, without global internet connection). Thanks. --- Marek Wajdzik E-NET24 Internet, Zywiec

1 0

None
by None 13 Jun '26

13 Jun '26

5.5 Route attributes ... enum source what protocol has told me about this route. Possible values: RTS_DUMMY, RTS_STATIC, RTS_INHERIT, RTS_DEVICE, RTS_STATIC_DEVICE, RTS_REDIRECT, RTS_RIP, RTS_OSPF, RTS_OSPF_IA, RTS_OSPF_EXT, RTS_BGP, RTS_PIPE. Why I receive error? Vladislav Grishin

1 0

None
by None 13 Jun '26

13 Jun '26

LSACK the prematurely aged entries before starting to send fresh LSUPDs with InitialSequenceNumber 0x80000001 (and not ...00). Casual grep suggests that other places where the sequence number is incremented, there isn't any warp-around check either. Lab setup: - 2x JunOS 9.3 - 1x BIRD OSPF (1.2.2) on Linux - 1x Quagga OSPF (0.98.x, 0.99.16) on Linux All connected on a single Ethernet as Area 0. The JunOS systems are DR/BDR. For the curious, the inter-op aftermath is this: - Quagga's ospfd, on receiving the bad LSUPD, correctly logs the abnormality and then segfaults instantly [bug #586] - JunOS just doesn't care and installs the entry with the illegal sequence number and sends it to other routers as usual -- thereby making a restart of quagga's ospfd very very short-lived and sad - The situation only resolves itself after one hour (the illegal LSUPD reaches MaxAge) or by forcefully purging the entry from the other systems' databases Regards, - D.

1 0