Bird 2 debugging, connections getting rejected
Hello, I'm trying to get IBGP session to work between Bird 2 and FFRouting (EdgeRouter). They are using Wireguard for the link, and I can ping them fine. BGP port is also open on both. What's happening here? Errors I'm getting: -------- 2020-08-03 23:51:56.870 <TRACE> ibgp_tku: Incoming connection from 2001:67c:1104:1a00::1 (port 46843) rejected -------- Full bird config: ---------------------------------------------------------------------------------------------------------------------------------------- # Configure logging #log syslog all; #log "/var/log/bird.log" { debug, trace, info, remote, warning, error, auth, fatal, bug }; log "/var/log/bird.log" all; #log syslog all; debug protocols { events, states }; # Set router ID. It is a unique identification of your router, usually one of # IPv4 addresses of the router. It is recommended to configure it explicitly. router id 45.92.40.5; # Turn on global debugging of all protocols (all messages or just selected classes) #debug protocols all; # debug protocols { events, states }; # Turn on internal watchdog # watchdog warning 5 s; # watchdog timeout 30 s; # You can define your own constants define my_asn = 213021; # define my_addr = 198.51.100.1; # Tables master4 and master6 are defined by default ipv4 table master4; ipv6 table master6; # Define more tables, e.g. for policy routing or as MRIB ipv4 table mrib4; ipv6 table mrib6; # The Device protocol is not a real routing protocol. It does not generate any # routes and it only serves as a module for getting information about network # interfaces from the kernel. It is necessary in almost any configuration. protocol device { scan time 5; } protocol direct DIRECT { ipv4; ipv6; } protocol kernel KERNEL4 { ipv4 { export all; import none; }; } protocol kernel KERNEL6 { ipv6 { export all; import none; }; } protocol static STATIC6 { ipv6; route 2a0b:a700:3::2/128 via 2a07:22c0:c100::; #route 2001:67c:1104:1a00::1 dev wg0; #route 2a01:4f9:2b:f800::2 via 2a07:22c0:c100::; #route 2a01:4f8::/29 via 2001:7f8:33::a105:8299:1; } filter internal_nets_v6 { if net ~ [ 2a0e:b107:6ec::/48,2a0e:8f02:2010::/44,2001:67c:1104::/48 ] then accept; reject; } filter no_export_internal_nets { if net ~ [ 2a0e:b107:6ec::/48,2a0e:8f02:2010::/44,2001:67c:1104::/48 ] then { bgp_community.add((65535:65281)); accept; } reject; } filter internal_route { if net ~ [ 2a07:22c0:c100::/64 ] then reject; accept; } template bgp T_SELF { local 2001:67c:1104:1a00::2 as 213021; ipv6 { import filter internal_nets_v6; export filter internal_route; }; } protocol bgp ibgp_tku from T_SELF { neighbor 2001:67c:1104:1a00::1 as 213021; #neighbor fe80::21b:21ff:febb:5db0%wg0 as 213021; direct; ipv6 { import filter internal_nets_v6; export all; next hop self; }; } protocol bgp ibgp_de from T_SELF { local 2001:67c:1104:1a01::1 as 213021; neighbor 2001:67c:1104:1a01::2 as 213021; direct; ipv6 { import all; export all; next hop self; }; } ---------------------------------------------------------------------------------------------------------------------------------------- EdgeRouter side: ---------------------------------------------------------------------------------------------------------------------------------------- address-family { ipv6-unicast { prefix-list { export ANNOUNCE-THESE } soft-reconfiguration { inbound } } } description "Frankfurt, DE" remote-as 213021 update-source 2001:67c:1104:1a00::1 ----------------------------------------------------------------------------------------------------------------------------------------
participants (1)
-
Skyler Mäntysaari