Hi misc@,
If there's any more information I could provide that would help, please
let me know. I'm a little out of my depth with the vpnv4 stuff, so any
pointers as to where I should be looking would be very much appreciated.
Thank you
On Thu, 29 Jun 2017, brad hendrickse wrote:
> Hi folks,
>
> I have a problem with routes learnt from BGP vpnv4 not being inserted into
> the FIB I'd expect. A tcpdump on the OpenBSD box shows we are receiving the
> prefixes (from a Cisco) with the labels intact. The MPE interface is
> configured in rdomain 1 with MPLS label 200. The loopback interface lo1 was
> automatically created as mentioned in the 6.1 changelog.
>
> We have this working on OpenBSD 5.4. My colleagues have seen this same
> behaviour since OpenBSD 5.9 explaining why we're still using 5.4. All configs
> and output below is from OpenBSD 6.1.
>
> Any help with this would be much appreciated.
>
> Thank you
>
>
> /etc/bgpd.conf:
> ----/----
> # global configuration
> AS 65002
> router-id 192.168.1.2
> holdtime 180
> listen on 192.168.1.2
> log updates
>
> group "peering AS65520" {
> remote-as 65520
> neighbor 192.168.1.1 {
> descr "AS 65520"
> announce capabilities yes
> announce self
> announce IPv4 vpn
> announce refresh yes
> announce restart yes
> }
> }
>
> rdomain 1 {
> descr "200:1"
> rd 200:1
> import-target rt 200:1
> export-target rt 200:1
> depend on mpe1
> network 10.10.10.2/32
> }
>
>
> ----/----
> bash-4.4# bgpctl show summary
> Neighbor AS MsgRcvd MsgSent OutQ Up/Down
> State/PrfRcvd
> AS 65520 65520 30 27 0 00:23:23 4
>
>
> ----/----
> bash-4.4# bgpctl show rib
> flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
> origin: i = IGP, e = EGP, ? = Incomplete
>
> flags destination gateway lpref med aspath origin
> AI*> rd 200:1 10.10.10.2/32 rd 0:0 0.0.0.0 100 0 i
> *> rd 200:1 100.10.0.0/24 192.168.1.1 100 0 65520 ?
> *> rd 200:1 155.10.0.0/24 192.168.1.1 100 0 65520 ?
> *> rd 200:1 200.10.0.0/24 192.168.1.1 100 0 65520 ?
> *> rd 200:1 210.10.0.0/24 192.168.1.1 100 0 65520 ?
>
>
> The next-hop for 155.10.0.0/24 is pingable
> ----/----
> bash-4.4# ping -c 3 192.168.1.1
> PING 192.168.1.1 (192.168.1.1): 56 data bytes
> 64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=0.536 ms
> 64 bytes from 192.168.1.1: icmp_seq=1 ttl=255 time=0.604 ms
> 64 bytes from 192.168.1.1: icmp_seq=2 ttl=255 time=0.587 ms
>
> --- 192.168.1.1 ping statistics ---
> 3 packets transmitted, 3 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 0.536/0.576/0.604/0.029 ms
>
>
> ----/----
> bash-4.4# bgpctl show fib
> flags: * = valid, B = BGP, C = Connected, S = Static, D = Dynamic
> N = BGP Nexthop reachable via this route R = redistributed
> r = reject route, b = blackhole route
>
> flags prio destination gateway
> *S 8 0.0.0.0/0 10.0.2.1
> *C 4 10.0.2.0/24 link#1
> *C 0 127.0.0.0/8 link#0
> *CN 4 192.168.1.0/30 link#2
> *S 8 192.168.2.1/32 192.168.1.1
> * 1 192.168.2.2/32 192.168.2.2
> *S r 8 224.0.0.0/4 127.0.0.1
> *S r 8 ::/96 ::1
> *S r 8 ::/104 ::1
> *C 0 ::1/128 link#0
> * 1 ::1/128 ::1
> *S r 8 ::127.0.0.0/104 ::1
> *S r 8 ::224.0.0.0/100 ::1
> *S r 8 ::255.0.0.0/104 ::1
> *S r 8 ::ffff:0.0.0.0/96 ::1
> *S r 8 2002::/24 ::1
> *S r 8 2002:7f00::/24 ::1
> *S r 8 2002:e000::/20 ::1
> *S r 8 2002:ff00::/24 ::1
> *S r 8 fe80::/10 ::1
> * 1 fe80:4::1/128 fe80:4::1
> *S r 8 fec0::/10 ::1
> *S r 8 ff01::/16 ::1
> * 4 ff01:4::/32 ::1
> *S r 8 ff02::/16 ::1
> * 4 ff02:4::/32 ::1
>
>
> The tables are coupled
> ----/----
> bash-4.4# bgpctl show table
> Table Description State
> 0 Loc-RIB coupled
> 1 200:1 coupled
>
>
> I don't expect to be able to ping the destination, but not expecting "No
> route to host"
> ----/----
> bash-4.4# ping -V 1 155.10.0.1
> PING 155.10.0.1 (155.10.0.1): 56 data bytes
> ping: sendmsg: No route to host
> ping: wrote 155.10.0.1 64 chars, ret=-1
> ping: sendmsg: No route to host
> ping: wrote 155.10.0.1 64 chars, ret=-1
> ping: sendmsg: No route to host
>
>
> ----/----
> bash-4.4# ifconfig -a
> lo0: flags=88049<UP,LOOPBACK,RUNNING,MULTICAST,MPLS> mtu 32768
> index 4 priority 0 llprio 3
> groups: lo
> inet6 ::1 prefixlen 128
> inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
> inet 192.168.2.2 netmask 0xffffffff
> xnf0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
> lladdr 4a:2f:aa:55:45:89
> index 1 priority 0 llprio 3
> groups: egress
> media: Ethernet manual
> status: active
> inet 10.0.2.38 netmask 0xffffff00 broadcast 10.0.2.255
> xnf1: flags=88843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,MPLS> mtu 1500
> lladdr 3a:fe:55:6f:ed:10
> index 2 priority 0 llprio 3
> media: Ethernet manual
> status: active
> inet 192.168.1.2 netmask 0xfffffffc broadcast 192.168.1.3
> enc0: flags=0<>
> index 3 priority 0 llprio 3
> groups: enc
> status: active
> pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33144
> index 5 priority 0 llprio 3
> groups: pflog
> mpe1: flags=11<UP,POINTOPOINT> rdomain 1 mtu 1500
> index 6 priority 0 llprio 3
> mpls label: 200
> groups: mpe
> inet 10.10.10.2 --> 255.255.255.255 netmask 0xffffffff
> lo1: flags=88008<LOOPBACK,MULTICAST,MPLS> rdomain 1 mtu 32768
> index 7 priority 0 llprio 3
> groups: lo
>
>
> ----/----
> bash-4.4# netstat -rn
> Routing tables
>
> Internet:
> Destination Gateway Flags Refs Use Mtu Prio Iface
> default 10.0.2.1 UGS 4 14416 - 8 xnf0
> 224/4 127.0.0.1 URS 0 2987 - 8 xnf0
> 10.0.2/24 10.0.2.38 UCn 1 19216 - 4 xnf0
> 10.0.2.1 00:09:0f:b5:58:8f UHLch 1 275 - 3 xnf0
> 10.0.2.38 4a:2f:aa:55:45:89 UHLl 0 2843 - 1 xnf0
> 10.0.2.255 10.0.2.38 UHb 0 3424 - 1 xnf0
> 192.168.1.0/30 192.168.1.2 UCn 1 0 - 4 xnf1
> 192.168.1.1 e8:ed:f3:79:7a:d8 UHLch 3 137 - 3 xnf1
> 192.168.1.2 3a:fe:55:6f:ed:10 UHLl 0 206 - 1 xnf1
> 192.168.1.3 192.168.1.2 UHb 0 0 - 1 xnf1
> 192.168.2.1 192.168.1.1 UGHS 0 0 - 8 xnf1
> 192.168.2.2 192.168.2.2 UHl 0 0 32768 1 lo0
>
> Internet6:
> Destination Gateway Flags Refs
> Use Mtu Prio Iface
> ::/96 ::1 UGRS 0
> 0 32768 8 lo0
> ::/104 ::1 UGRS 0
> 0 32768 8 lo0
> ::1 ::1 UHhl 14
> 28 32768 1 lo0
> ::127.0.0.0/104 ::1 UGRS 0
> 0 32768 8 lo0
> ::224.0.0.0/100 ::1 UGRS 0
> 0 32768 8 lo0
> ::255.0.0.0/104 ::1 UGRS 0
> 0 32768 8 lo0
> ::ffff:0.0.0.0/96 ::1 UGRS 0
> 0 32768 8 lo0
> 2002::/24 ::1 UGRS 0
> 0 32768 8 lo0
> 2002:7f00::/24 ::1 UGRS 0
> 0 32768 8 lo0
> 2002:e000::/20 ::1 UGRS 0
> 0 32768 8 lo0
> 2002:ff00::/24 ::1 UGRS 0
> 0 32768 8 lo0
> fe80::/10 ::1 UGRS 0
> 0 32768 8 lo0
> fec0::/10 ::1 UGRS 0
> 0 32768 8 lo0
> fe80::1%lo0 fe80::1%lo0 UHl 0
> 0 32768 1 lo0
> ff01::/16 ::1 UGRS 1
> 1 32768 8 lo0
> ff01::%lo0/32 ::1 Um 0
> 1 32768 4 lo0
> ff02::/16 ::1 UGRS 1
> 1 32768 8 lo0
> ff02::%lo0/32 ::1 Um 0
> 1 32768 4 lo0
>
> MPLS:
> In label Out label Op Gateway Flags Refs Use Mtu
> Prio Interface
> 20 - LOCAL 192.168.1.1 UGT 0 0 - 8
> xnf1
>
>
> ----/----
> bash-4.4# netstat -rn -T1
> Routing tables
>
> Internet:
> Destination Gateway Flags Refs Use Mtu Prio Iface
> 10.10.10.2 10.10.10.2 UHl 0 28 - 1 mpe1
> 255.255.255.255 10.10.10.2 UH 0 0 - 8 mpe1
>
> MPLS:
> In label Out label Op Gateway Flags Refs Use Mtu
> Prio Interface
> 200 - POP mpe1 UT 0 0 - 8
> mpe1
>
>
>
>
No comments:
Post a Comment