On 2010-05-15, Xavier Beaudouin <k...@oav.net> wrote: > Hello, > > I am running OpenBSD 4.7-current, and it seems I have some problems to > negociate tcp md5 bgp session... They doesn't seems at all to wake up, I have > connection timeout... or what ever.
Please show ipsecctl -sa and netstat -rnfencap. I have md5 working with a kernel from April 28th and an absolutely -current bgpd, and also with the version from the Apr 28th snapshot, so I don't think there is a general problem with the code you're running. > dmesg : > > OpenBSD 4.7-current (GENERIC.MP) #560: Wed Apr 28 11:55:01 MDT 2010 > dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP > cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz ("GenuineIntel" 686-class) 3 GHz > cpu0: > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,D > S,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,xTPR > real mem = 1072132096 (1022MB) > avail mem = 1028767744 (981MB) > mainbus0 at root > bios0 at mainbus0: AT/286+ BIOS, date 06/12/06, BIOS32 rev. 0 @ 0xfb6d0, > SMBIOS rev. 2 > .3 @ 0xf0800 (41 entries) > bios0: vendor Phoenix Technologies, LTD version "6.00 PG" date 06/12/2006 > bios0: Supermicro P4SC8 > acpi0 at bios0: rev 0 > acpi0: tables DSDT FACP APIC > acpi0: wakeup devices CSAD(S5) HUB0(S5) HRB_(S5) UAR1(S5) UAR2(S5) USB0(S3) > USB1(S3) U > SBE(S3) MODM(S5) PCI0(S5) > acpitimer0 at acpi0: 3579545 Hz, 24 bits > acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat > cpu0 at mainbus0: apid 0 (boot processor) > cpu0: apic clock running at 199MHz > cpu1 at mainbus0: apid 1 (application processor) > cpu1: Intel(R) Pentium(R) 4 CPU 3.00GHz ("GenuineIntel" 686-class) 3 GHz > cpu1: > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,D > S,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,xTPR > ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 24 pins > ioapic0: misconfigured as apic 0, remapped to apid 2 > ioapic1 at mainbus0: apid 3 pa 0xfec10000, version 20, 24 pins > acpiprt0 at acpi0: bus 0 (PCI0) > acpiprt1 at acpi0: bus 1 (CSAB) > acpiprt2 at acpi0: bus 4 (HUB0) > acpiprt3 at acpi0: bus 2 (HRB_) > acpicpu0 at acpi0 > acpicpu1 at acpi0 > acpitz0 at acpi0acpitz0: THRM: failed to read _TMP > acpibtn0 at acpi0: PWRB > bios0: ROM list: 0xc0000/0x8000 0xc8000/0x4000! > pci0 at mainbus0 bus 0: configuration mode 1 (bios) > pchb0 at pci0 dev 0 function 0 "Intel 82875P Host" rev 0x02 > ppb0 at pci0 dev 3 function 0 "Intel 82875P CSA" rev 0x02 > pci1 at ppb0 bus 1 > em0 at pci1 dev 1 function 0 "Intel PRO/1000CT (82547GI)" rev 0x00: apic 2 int > 18 (irq > 10), address 00:30:48:81:18:0a > ppb1 at pci0 dev 28 function 0 "Intel 6300ESB PCIX" rev 0x02 > pci2 at ppb1 bus 2 > ppb2 at pci2 dev 1 function 0 "Pericom PI7C21P100 PCIX-PCIX" rev 0x01 > pci3 at ppb2 bus 3 > em1 at pci3 dev 4 function 0 "Intel PRO/1000MT QP (82546GB)" rev 0x03: apic 3 > int 0 (i > rq 9), address 00:1b:21:30:85:d4 > em2 at pci3 dev 4 function 1 "Intel PRO/1000MT QP (82546GB)" rev 0x03: apic 3 > int 1 (i > rq 9), address 00:1b:21:30:85:d5 > em3 at pci3 dev 6 function 0 "Intel PRO/1000MT QP (82546GB)" rev 0x03: apic 3 > int 2 (i > rq 9), address 00:1b:21:30:85:d6 > em4 at pci3 dev 6 function 1 "Intel PRO/1000MT QP (82546GB)" rev 0x03: apic 3 > int 3 (i > rq 9), address 00:1b:21:30:85:d7 > uhci0 at pci0 dev 29 function 0 "Intel 6300ESB USB" rev 0x02: apic 2 int 16 > (irq 11) > uhci1 at pci0 dev 29 function 1 "Intel 6300ESB USB" rev 0x02: apic 2 int 19 > (irq 12) > "Intel 6300ESB WDT" rev 0x02 at pci0 dev 29 function 4 not configured > "Intel 6300ESB APIC" rev 0x02 at pci0 dev 29 function 5 not configured > ehci0 at pci0 dev 29 function 7 "Intel 6300ESB USB" rev 0x02: apic 2 int 23 > (irq 7) > usb0 at ehci0: USB revision 2.0 > uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 > ppb3 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0x0a > pci4 at ppb3 bus 4 > vga1 at pci4 dev 9 function 0 "ATI Rage XL" rev 0x27 > wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) > wsdisplay0: screen 1-5 added (80x25, vt100 emulation) > em5 at pci4 dev 10 function 0 "Intel PRO/1000MT (82541GI)" rev 0x00: apic 2 > int 19 (ir > q 12), address 00:30:48:81:18:0b > ichpcib0 at pci0 dev 31 function 0 "Intel 6300ESB LPC" rev 0x02 > pciide0 at pci0 dev 31 function 1 "Intel 6300ESB IDE" rev 0x02: DMA, channel 0 > configu > red to compatibility, channel 1 configured to compatibility > wd0 at pciide0 channel 0 drive 0: <DMV340H4-004-M> > wd0: 1-sector PIO, LBA, 3679MB, 7535808 sectors > wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 > > > ifconfig em5 : > > ifconfig em5 > em5: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 > lladdr 00:30:48:81:18:0b > description: Sfinx > priority: 0 > media: Ethernet 100baseTX full-duplex > status: active > inet 194.68.129.xxx netmask 0xffffff00 broadcast 194.68.129.255 > inet6 fe80::230:48ff:fe81:180b%em5 prefixlen 64 scopeid 0x6 > inet6 2001:7f8:4e:2::xxx prefixlen 64 > > Extract of /etc/bgpd.conf : > > group Sfinx { > local-address 194.68.129.xxx > announce all > softreconfig in yes > softreconfig out yes > set med 50 > set localpref 5000 > > # SFinx > neighbor 194.68.129.102 { > remote-as 2200 > max-prefix 200 restart 60 > tcp md5sig password ZeUnecryptedPass > set { med +5 } > set community delete 2200:* > } > } > > Extract of /var/log/messages about 194.68.129.102 : > > May 14 14:35:40 core-3 bgpd[1238]: neighbor 194.68.129.102: socket error: > Operation timed out > May 14 14:38:55 core-3 bgpd[1238]: neighbor 194.68.129.102: socket error: > Operation timed out > May 14 14:52:56 core-3 bgpd[31552]: neighbor 194.68.129.102: socket error: > Operation timed out > May 14 14:56:10 core-3 bgpd[31552]: neighbor 194.68.129.102: socket error: > Operation timed out > > netstat -a says : SYN_SENT .... > > But no luck :( > > /Xavier