Juliusz Chroboczek | 7 Feb 22:46
Picon

[quagga-users 12713] Multiple routing tables (Linux policy routing)

Hi,

My router is running quagga in a non-default table (table 8), since I'm
using different default routes for locally originated packets and for
forwarded packets (which go through a NAT box):

  $ grep table /usr/local/quagga/etc/zebra.conf
  table 8
  $ ip rule show
  0:      from all lookup local 
  100:    from 192.168.4.0/24 lookup 8 
  101:    from all to 192.168.4.0/24 lookup 8 
  32766:  from all lookup main 
  32767:  from all lookup default 

I'd like there to be two distinct default routes that are active at the
same time, one to the (quagga discovered) NAT box in table 8, one to the
(statically configured) router in table main.  Unfortunately, quagga
doesn't seem to install the route in table 8:

  $ ip route show 0.0.0.0/0 table main
  default via A.B.C.D dev eth0 
  $ ip route show 0.0.0.0/0 table 8
  $

Quagga is obviously receiving the default route to the NAT box:

  # show ip route 0.0.0.0/0
  Routing entry for 0.0.0.0/0
    Known via "babel", distance 95, metric 0
(Continue reading)

Sanjeev Gupta | 6 Feb 07:30
Gravatar

[quagga-users 12711] BPG Proxy objects

Hi,

This is not a quagga question, but since I use quagga, this is the only BGP community I frequent.

Over the years, my ASN (37989) has been included by various transit providers in proxy objects.  Some of these are no longer providing transit for me.

Does this hurt?
Do I need to clean these?

Thank you,
--
Sanjeev Gupta
+65 98551208

_______________________________________________
Quagga-users mailing list
Quagga-users@...
http://lists.quagga.net/mailman/listinfo/quagga-users
Steve Clark | 2 Feb 12:54
Gravatar

[quagga-users 12709] OSPF over IPSEC without GRE

Hi all,

Cisco has come up with a way to do OSPF over IPSEC without using GRE. Can this same
thing be accomplished with quagga and Linux?

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00804acfea.shtml

Thanks,

--
Stephen Clark
NetWolves
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.clark-HKs6b5iW9l2akBO8gow8eQ@public.gmane.org
http://www.netwolves.com
_______________________________________________
Quagga-users mailing list
Quagga-users@...
http://lists.quagga.net/mailman/listinfo/quagga-users
James Andrewartha | 1 Feb 02:52
Picon
Favicon
Gravatar

[quagga-users 12704] BGP routes becoming inactive after peer drop

Hi,

We have two BGP sessions, one providing a full feed, and another just
providing a default route. Whenever the full feed peer drops, all BGP
routes are marked as inactive and don't appear in the kernel's routing
table. Even if the full feed comes back it's still inactive. The only
way to fix it is to restart quagga.

Here's an excerpt of our config, the full feed comes in from
115.70.192.5 over vlan1025:

interface vlan1025
 ip address 115.70.192.6/30
 ipv6 nd suppress-ra
!
interface vlan1026
 ip address 203.24.54.150/30
 ipv6 nd suppress-ra
!
router bgp 45797
 bgp router-id 203.135.184.1
 bgp log-neighbor-changes
 network 203.135.184.0/22
 network 203.135.184.0/23
 network 203.135.186.0/23
 neighbor 115.70.192.5 remote-as 10143
 neighbor 115.70.192.5 description Exetel
 neighbor 115.70.192.5 weight 2000
 neighbor 115.70.192.5 prefix-list split23 out
 neighbor 150.101.172.174 remote-as 4739
 neighbor 150.101.172.174 description Internode
 neighbor 150.101.172.174 prefix-list none out
 neighbor 150.101.172.174 route-map PREPEND out
 neighbor 203.24.54.149 remote-as 9553
 neighbor 203.24.54.149 description Highway1
 neighbor 203.24.54.149 weight 1000
 neighbor 203.24.54.149 prefix-list all22 out
 neighbor 2001:44b8:6020:1::1 remote-as 4739
 neighbor 2001:44b8:6020:1::1 description Internodev6
 no neighbor 2001:44b8:6020:1::1 activate
!
ip prefix-list all22 seq 5 permit 203.135.184.0/22
ip prefix-list none seq 5 permit 203.135.185.0/24
ip prefix-list split23 seq 5 permit 203.135.184.0/23
ip prefix-list split23 seq 10 permit 203.135.186.0/23
!
route-map PREPEND permit 10
 set as-path prepend 45797 45797 45797 45797 45797

I've search the archives, but all I can find is something about routes
being marked inactive if the peer isn't directly connected, but that's
not the case here:

antares-a# show ip route 203.24.54.149
Routing entry for 203.24.54.149/32
  Known via "kernel", distance 0, metric 0, best
  * directly connected, vlan1026

antares-a# show ip route 115.70.192.5
Routing entry for 115.70.192.4/30
  Known via "connected", distance 0, metric 1, best
  * directly connected, vlan1025

Any idea why the BGP routes are being marked inactive?

Thanks,

--

-- 
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877
Carlos Neto | 30 Jan 00:06
Picon
Gravatar

[quagga-users 12696] Loopback interface?

HI,

i'm using interface lo and apply the address /32 but when i test ifconfig lo just appear 127.0.0.1 not the address applied.

Could point me a few examples to configure quagga with loadbalance and failover ? i'm using 2 ISP's with full routing and no default route
The second ISP will activate tomorrow the first one is working ok.

Thanks alot !
Carlos

_______________________________________________
Quagga-users mailing list
Quagga-users@...
http://lists.quagga.net/mailman/listinfo/quagga-users
Carlos Neto | 29 Jan 04:56
Picon
Gravatar

[quagga-users 12694] Quagga Multipath and failover help

Dear Users,
I'm new on Quagga use and know the list receive this request a lot, but could you guys take a look on my config and help with the failover concerns?
At now i'm using two ISPs, so let's check if i need something more.
Thanks Alot

router bgp my asn
bgp router-id xxx.xxx.xxx.1
bgp log-neighbor-changes
network xxx.xxx.xxx.xxx/22

# Begin configuration for ISP01
neighbor xxx.xxx.xxx.xxx remote-as zzz
neighbor xxx.xxx.xxx.xxx soft-reconfiguration inbound
neighbor xxx.xxx.xxx.xxx description Transit ISP01
neighbor xxx.xxx.xxx.xxx ebgp-multihop 2
neighbor xxx.xxx.xxx.xxx update-source xxx.xxx.xxx.1
neighbor xxx.xxx.xxx.xxx version 4
no auto-summary

# Begin configuration for ISP02
neighbor xxx.xxx.xxx.xxx remote-as yyy
neighbor xxx.xxx.xxx.xxx soft-reconfiguration inbound
neighbor xxx.xxx.xxx.xxx description Transit ISP02
neighbor xxx.xxx.xxx.xxx ebgp-multihop 2
neighbor xxx.xxx.xxx.xxx update-source xxx.xxx.xxx.1
neighbor xxx.xxx.xxx.xxx version 4

Any example will help alot!
Thanks again
Carlos

_______________________________________________
Quagga-users mailing list
Quagga-users@...
http://lists.quagga.net/mailman/listinfo/quagga-users
narender | 27 Jan 10:10
Picon

[quagga-users 12691] TODO list for OSPFv3 in the preference order

HI,
Is there a TODO list for OSPFv3 for zebra/quagga. I would like to know the items 
on your preferred list and for which the work is on going. 

That would help me to pick up something. 
Sebastijan Šilec | 25 Jan 13:04
Picon
Favicon
Gravatar

[quagga-users 12688] BGP multihoming on one ISP

Hi.

I'm using quagga with bgp. Now we have a backup link that should take over if the primary link fails.

Current setup (primary link):

router bgp XXXXX
 bgp router-id ROUTERIP
 bgp log-neighbor-changes
 network OUR-C-CLASS/24
 neighbor IP remote-as AS-ISP
 neighbor IP soft-reconfiguration inbound
 neighbor IP description Optics

No I don't konw how to setup the secondary link because it uses the same neighbor IP and AS number.

I've found something about ebgp-multihop but not sure if this is the right aproach and how to set it up.
Can I setup BGP to bind with specific interfaces (primary link - eth2, secondary - eth3)?


Any advise would be great.

Thanky

Sebastijan
--
Attachment (sebastijan_silec.vcf): text/x-vcard, 327 bytes
_______________________________________________
Quagga-users mailing list
Quagga-users@...
http://lists.quagga.net/mailman/listinfo/quagga-users
mironto | 25 Jan 11:12
Picon
Favicon
Gravatar

[quagga-users 12687] BGP override-capability configuration

Hello everybody,
 
I am running quagga 0.99.17 and I need to disable 4-byte AS capability to some neighbors. According to manual I should be able to do it through override-capability command:
 
 
> You may prefer locally configured capabilities more than the negotiated capabilities even though
> remote peer sends capabilities. If the peer is configured by override-capability,
> bgpd ignores received capabilities then override negotiated capabilities with configured values.
>
> — BGP: neighbor peer override-capability
> — BGP: no neighbor peer override-capability
>
> Override the result of Capability Negotiation with local configuration. Ignore remote peer's capability value.
However, I cannot find example, how do I provide that local configuration. Can somebody advice?
 
Thanks
 
Miro
_______________________________________________
Quagga-users mailing list
Quagga-users@...
http://lists.quagga.net/mailman/listinfo/quagga-users
Denis Ovsienko | 22 Jan 15:03
Picon
Favicon
Gravatar

[quagga-users 12686] a preview of Babel, new routing protocol, is available

Hello, all.

It is the time to update on the new routing protocol daemon, "babeld", which is available in the development
branches of Quagga. 

Babel is a routing protocol designed by Juliusz Chroboczek with the specific purpose of routing wireless
networks in mind. The protocol used to be implemented in a standalone babeld software, and Juliusz's
colleague, Matthieu Boutier, is now making it available as one of the Quagga components. I have
personally verified, that the involved changes do not interfere with any other Quagga daemon (at least in
the RE-testing-0.99 branch), and that the current implementation allows a couple of routers to learn
each other's IPv6 loopback addresses over a IPv6 link and install respective routes into kernel FIB.
Matthieu and Juliusz can surely refer to examples of larger-scale deployments of Babel.

Getting your own Babel testbed is as easy as checking Quagga out of git and building it. To be specific, the
following branches at the time of this writing are known to work:

git://code.quagga.net/quagga-RE.git (commit f05fecd)
git://github.com/boutier/babeld-for-quagga.git (commit 78b1013)

I had put the following into babeld.conf to make it work:

!
password z
service advanced-vty
!
router babel
 network eth0
 redistribute kernel
 redistribute connected
 redistribute static
!
log file /var/log/quagga/babeld.log
!

The result looks like this (30::1/128 is the loopback interface of the remote host):

localhost.localdomain# sh ipv6 route 
Codes: K - kernel route, C - connected, S - static, R - RIPng,
       O - OSPFv6, I - IS-IS, B - BGP, A - Babel,
       > - selected route, * - FIB route

C>* ::1/128 is directly connected, lo
C>* 20::1/128 is directly connected, dummy0
A>* 30::1/128 [95/0] via fe80::22cf:30ff:fe02:b052, eth0
C * fe80::/64 is directly connected, eth0
C * fe80::/64 is directly connected, wlan0
C>* fe80::/64 is directly connected, dummy0
localhost.localdomain# 

In the process of setting it up I realized the need to understand what in particular the routing processes
are exchanging. This is quite hard without a packet analyzer understanding Babel protocol packets, i.e.
Wireshark 1.6.5 or tcpdump 4.2.1. The former is available in Fedora 16, which I didn't have handy at the
time of setup, but the latter compiled and installed just fine. For example, this is an example of a regular
periodic PDU dissection once the adjacency is established:

17:50:51.326330 IP6 (hlim 1, next-header UDP (17) payload length: 115) fe80::217:42ff:fe3e:3612.6696
> ff02::1:6.6696: [udp sum ok] babel 2 (103)
	Hello seqno 15804 interval 400
	IHU fe80::22cf:30ff:fe02:b052 txcost 96 interval 1200
	Router Id 62:69:23:ff:fe:69:d9:52
	Update/prefix 30::1/128 metric 96 seqno 2794 interval 1600
	Router Id d6:98:f9:ff:fe:e7:08:96
	Update/prefix 20::1/128 metric 0 seqno 21994 interval 1600

To sum it up, this effort is still a work in progress, but all hidden bugs are believed to be isolated in the
babeld process. In case you manage to approach such a bug, please file it to the standard Quagga bugzilla,
it will be dispatched appropriately.

Thanks for reading!

--

-- 
    Denis Ovsienko
Vladislav V. Prodan | 21 Jan 15:19
Favicon
Gravatar

[quagga-users 12685] It does not work 'wri mem' through vtysh


FreeBSD 9.0

quagga-0.99.20      Free RIPv1, RIPv2, OSPFv2, BGP4, IS-IS route software

Here's a piece of script that calls the 'wri me':

#!/bin/sh

vtysh -d bgpd -c 'conf t' -c 'route-map map-AS-WNET-out permit 320' \
-c 'description - more spec prefix 169 out wnet' \
-c 'match ip address prefix-list upstream-out-169' \
-c 'set community 15772:301 15772:321 15772:331' \
-c 'exit' -c 'exit' -c 'wri mem'

--

-- 
Vladislav V. Prodan
System & Network Administrator
http://support.od.ua
+380 67 4584408, +380 99 4060508
VVP88-RIPE

Gmane