Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
And check that required route has all needed communities: > show route all x.x.x.x/y > > On Mon, Apr 6, 2020 at 5:35 PM Fabiano D'Agostino > wrote: > > > > Hey, > > thank you! I think I am having the same problem they had here: > > https://bird.network.cz/pipermail/bird-u

Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
and how these kind of checks are handled? if (myas,peeras) ~ bgp_community what is bgp_community? Thanks, Il giorno lun 6 apr 2020 alle ore 15:32 Fabiano D'Agostino < fabiano.dagostin...@gmail.com> ha scritto: > Thank you, but "if the route does not come from BGP then false&

Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
u add to > it in your configuration what makes them work. > > More information about communities: > https://en.wikipedia.org/wiki/Border_Gateway_Protocol#Communities > > > Kind regards, > Cybertinus > > > On 2020-04-06 17:03, Fabiano D'Agostino wrote: > >

Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
ect only communities you are sending and other > attributes, but they do not affect directly the logic of your route > server's filters, there is no magic here. > > On Mon, Apr 6, 2020 at 6:08 PM Fabiano D'Agostino > wrote: > > > > Does 'show route where' exist as comman

Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
ur check for the presence of the community will not > fire. > > On Mon, Apr 6, 2020 at 7:03 PM Fabiano D'Agostino > wrote: > > > > This is the bird.conf of the route server: > > https://pastebin.com/qwp6nBtz > > This is the bird.conf of one router: > > https:/

Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
d((x,y)); > This is for community written as x:y on most hardware routers. > > On Mon, Apr 6, 2020 at 8:57 PM Fabiano D'Agostino > wrote: > > > > Thanks for your helping, > > How do I set in my router (AS2) the community to the exported routes? I > don't understand this. > &

Invalid ROA

2020-04-19 Thread Fabiano D'Agostino
Hi, how can I check which prefixes are not valid and so rejected? It seems the rpki is working, but I'd like to be sure. I have this: if (roa_check(r4, net, bgp_path.last) = ROA_INVALID) then { print "Ignore RPKI invalid ", net, " for ASN ", bgp_path.last; but I don't understand where the prints

Re: Invalid ROA

2020-04-19 Thread Fabiano D'Agostino
Thanks! But can I also use birdc to check rejected prefixes? Anyway why do you suggest to use bgp_path.last_noaggregated? Il giorno dom 19 apr 2020 alle ore 19:19 Job Snijders ha scritto: > Hi, > > On Sun, Apr 19, 2020, at 19:09, Fabiano D'Agostino wrote: > > how can I check

Re: Invalid ROA

2020-04-20 Thread Fabiano D'Agostino
Apr 2020 20:42:21 GMT, Fabiano D'Agostino wrote: > > Thanks! > > But can I also use birdc to check rejected prefixes? > > If you add a community, it will be visible with `show route all > filtered` > > > Anyway why do you suggest to use bgp_path.last_noaggregated? > &

Re: Invalid ROA

2020-04-20 Thread Fabiano D'Agostino
utes from master4 and master6 tables > > to show routes from this protocol, use > > show route table t_0002_as2 all filtered > > Maria > > On 4/20/20 2:50 PM, Fabiano D'Agostino wrote: > > Yes, I just enabled it: > > protocol bgp { > > ...

Re: Invalid ROA

2020-04-20 Thread Fabiano D'Agostino
, but 'show route all filtered' doesn't show anything. Il giorno lun 20 apr 2020 alle ore 14:05 Maria Matejka ha scritto: > And do you have > import keep filtered; > in your config? > Maria > > On 4/20/20 11:19 AM, Fabiano D'Agostino wrote: > > Hi, > > In my route server bi

Re: Invalid ROA

2020-04-20 Thread Fabiano D'Agostino
»left operand > is contained by the right operand«. > > In other words, exchange the operands of the tilde. > > Maria > > On 4/20/20 3:19 PM, Fabiano D'Agostino wrote: > > Thanks, it worked. So the community isn't needed? I tried 'show route > > table t_0002_as2

Export clause in Pipe protocol

2020-04-08 Thread Fabiano D'Agostino
Good evening, I have this kind of bird.conf: https://pastebin.com/6pMkJFix I understand that in the Pipe protocol I need the 'import' clause to import in master table routes learn by BGP. But I don't understand why in the Pipe protocol in combination with BGP is useful to have the 'export' clause

BGP communities

2020-04-05 Thread Fabiano D'Agostino
Good evening, could someone explain me the meaning of these lines? function bgp_out(int peeras) { if ! (source = RTS_BGP ) then return false; if peeras > 65535 then return true; ### communities do not support AS32 if (0,peeras) ~ bgp_community then return false; if (myas,peeras) ~ bgp_community

Re: Direct protocol affects BGP

2020-03-25 Thread Fabiano D'Agostino
direct > routes. > > On Wed, Mar 25, 2020 at 5:21 PM Fabiano D'Agostino > wrote: > > > > Yes, I disabled direct protocol on both routers. The full bird.conf is > the following: > > log syslog all; > > ipv4 table master4; > > ipv6 table

How to see as path

2020-04-03 Thread Fabiano D'Agostino
Good morning, how can I see the as path of a route? I think the command is 'show route' and I get: 192.168.5.0/24 unicast [bgp1 ...]*(100) [AS3i] via.. What is 100? AS3 should be the as path, right? Why is there an 'i'? Thanks, Fabiano

Re: How to see as path

2020-04-03 Thread Fabiano D'Agostino
Thank you! Il Ven 3 Apr 2020, 12:32 Maria Matějka ha scritto: > The show route command shows only reduced info. Use > > show route all > > to get full information. > Maria > > On April 3, 2020 11:47:04 AM GMT+02:00, Fabiano D'Agostino < > fabiano.dagostin...@gmail.

Re: Direct protocol affects BGP

2020-03-25 Thread Fabiano D'Agostino
er2? > And that is definitely not the full bird config, you do not have a > kernel protocol for example. > > On Tue, Mar 24, 2020 at 10:50 PM Fabiano D'Agostino > wrote: > > > > There is no gateway because they are directly connected. However my > network topology is t

Re: Upgrade from Bird 1.3.6 to Bird 2.0.7

2020-03-28 Thread Fabiano D'Agostino
converted properly. As the config language is complex a lot, we haven't > prepared an automatic config converter. Anyway, feel free to create any > such converter or any approximation of it. > Maria > > On March 27, 2020 6:46:23 PM GMT+01:00, Fabiano D'Agostino < > fabiano.dagostin.

Re: Upgrade from Bird 1.3.6 to Bird 2.0.7

2020-03-28 Thread Fabiano D'Agostino
ost the same way as you can run several instances > of the same version of the bird. > > On Sat, Mar 28, 2020 at 7:21 AM Fabiano D'Agostino > wrote: > > > > Good morning Maria, > > but how can I guarantee business continuity? I mean can two versions of > B

Re: Bird on Scientific Linux

2020-03-28 Thread Fabiano D'Agostino
gt; ha scritto: > Hello Fabiano, > > On Sat, 28 Mar 2020, Fabiano D'Agostino wrote: > > I am using Scientific Linux 6 (RHEL 6) and I was able to install Bird > > 1.3.6, but when I try to install Bird 2.0.7 I get same errors? Why? > > what does "same errors" mean

Bird on Scientific Linux

2020-03-28 Thread Fabiano D'Agostino
Hi all, I am using Scientific Linux 6 (RHEL 6) and I was able to install Bird 1.3.6, but when I try to install Bird 2.0.7 I get same errors? Why? Thanks in advance, Fabiano

Upgrade from Bird 1.3.6 to Bird 2.0.7

2020-03-27 Thread Fabiano D'Agostino
Hi all, is there any easy way to upgrade from Bird 1.3.6 to Bird 2.0.7? Thanks, Fabiano D'Agostino

Re: Direct protocol affects BGP

2020-03-24 Thread Fabiano D'Agostino
little weird, is it from bird? There are also > commonly a protocol and metric shown. > Those are from your route-reflector? Do you have your bgp sessions up > when direct is disabled? > > On Tue, Mar 24, 2020 at 9:33 PM Fabiano D'Agostino > wrote: > > > > Good evening

Re: BGP communities

2020-04-06 Thread Fabiano D'Agostino
un 6 apr 2020 alle ore 10:50 Bernd Naumann ha scritto: > On 05.04.20 23:08, Fabiano D'Agostino wrote: > > Good evening, > > could someone explain me the meaning of these lines? > > > > function bgp_out(int peeras) > > { > > if ! (source = RTS_BGP ) then

Re: Invalid ROA

2020-04-28 Thread Fabiano D'Agostino
or filtered routes to make BIRD > work with them. > > Maria > > On 4/20/20 3:47 PM, Fabiano D'Agostino wrote: > > Thanks, I did it but it is still not working. Nevermind I will use 'show > > route filtered'. > > > > Il giorno lun 20 apr 2020 alle ore

BGP Socket:Connection closed

2020-04-23 Thread Fabiano D'Agostino
Good evening, I am facing this problem with bgp protocol: Info: Active Socket:Connection closed Why do I have this? Thanks in advance, Fabiano

BGP password

2020-05-12 Thread Fabiano D'Agostino
Hi everyone, when I try to set up a password for a BGP peering the connection state is Connect and not Established, so BGP is not importing prefixes. The neighbor which is doing a peering is a Cisco router and I set up the password with neighbor ip-address password string command. Thanks,

Re: BGP password

2020-05-12 Thread Fabiano D'Agostino
sword"; ipv4 { import all; table t4; export none;}; } Without password it is working. Thanks, Fabiano Il giorno mar 12 mag 2020 alle ore 16:54 Chriztoffer Hansen < chriztoffer.han...@de-cix.net> ha scritto: > Dear Fabiano, > > Fabiano

Re: Enable RPKI on Centos

2020-05-05 Thread Fabiano D'Agostino
has the libssh feature enabled from what I can > tell, I don't think you should have to do anything special. > > On Tue, May 5, 2020 at 1:07 PM Fabiano D'Agostino < > fabiano.dagostin...@gmail.com> wrote: > >> Good evening, >> Before I was using Ubuntu and to enable the

BGP between VMs

2020-03-19 Thread Fabiano D'Agostino
Hi all, I am new to Bird and I would like to do the following. I have two VMs and I would like to make a BGP peering between the two VMs, is it possible using Bird? Thanks in advance, Fabiano

Re: BGP between VMs

2020-03-19 Thread Fabiano D'Agostino
Good evening Alexander, thanks for answering, could you give me some hints of how to do it? Il giorno gio 19 mar 2020 alle ore 22:37 Alexander Zubkov ha scritto: > Hi, > > Yes, it is possible. > > On Thu, Mar 19, 2020 at 10:34 PM Fabiano D'Agostino > wrote: > > > >

Re: BGP between VMs

2020-03-19 Thread Fabiano D'Agostino
relationship I can suggest you to read the > documentation example about bgp filtering (easily accessible from gitlab). > > Mattia > > > Il giorno 19 mar 2020, alle ore 22:38, Fabiano D'Agostino < > fabiano.dagostin...@gmail.com> ha scritto: > > > >  > > Hi

Re: BGP between VMs

2020-03-20 Thread Fabiano D'Agostino
ards BIRD2. > > Cheers, > Kees > > On 20-03-2020 08:25, Fabiano D'Agostino wrote: > > Hi, > thanks everyone, I read the guide, but I didn't find how to put the two > VMs in two different ASs. > > Il giorno ven 20 mar 2020 alle ore 02:43 Robert Blayzor < > rblayzor.b

Re: BGP between VMs

2020-03-20 Thread Fabiano D'Agostino
Hi, thanks everyone, I read the guide, but I didn't find how to put the two VMs in two different ASs. Il giorno ven 20 mar 2020 alle ore 02:43 Robert Blayzor < rblayzor.b...@inoc.net> ha scritto: > On 3/19/20 7:11 PM, Chriztoffer Hansen wrote: > > EBGP between two bgp speakers (eg. VMs) is rule

Re: BGP between VMs

2020-03-20 Thread Fabiano D'Agostino
; [image: image.png] > With Kinds Regards > -- > *Md Alamgir Kabi*r > > > > On Fri, Mar 20, 2020 at 3:31 AM Fabiano D'Agostino < > fabiano.dagostin...@gmail.com> wrote: > >> Hi all, >> I am new to Bird and I would like to do t

Re: Proper way to start Bird

2020-03-21 Thread Fabiano D'Agostino
, > > you need to specify the correct path your the control socket via `birdc > -s `. You apparently built your bird with PREFIX=/usr/local but > the control socket is not there. Have you checked whether it is at > `/run/bird.ctl` instead? > > Best, > > Martin > > On

Proper way to start Bird

2020-03-21 Thread Fabiano D'Agostino
Hi all, which is the proper way to start Bird? I edited the bird.conf and now I am getting this error when I lunch birdc: Unable to connect to server control socket (/usr/local/var/run/bird.ctl): Connection refused I also did bird -p Thanks, Fabiano

Re: Proper way to start Bird

2020-03-21 Thread Fabiano D'Agostino
According to the documentation the socket is in *prefix*/var/run/bird.ctl Anyway if I run bird I get this error:Cannot create control socket Address already in use Il giorno sab 21 mar 2020 alle ore 15:35 Fabiano D'Agostino < fabiano.dagostin...@gmail.com> ha scritto: > Hi Martin, &g

Re: Proper way to start Bird

2020-03-22 Thread Fabiano D'Agostino
; > On Sat, Mar 21, 2020 at 11:49 PM Fabiano D'Agostino > wrote: > > > > I am using Bird 2.0.7 and I didn't find any way to stop the process, I > mean I didn't find any command > > > > Il giorno sab 21 mar 2020 alle ore 22:28 Alexander Zubkov < > gr...@qr

Re: Proper way to start Bird

2020-03-21 Thread Fabiano D'Agostino
permissions. > > On Sat, Mar 21, 2020 at 7:31 PM Fabiano D'Agostino > wrote: > > > > According to the documentation the socket is in prefix/var/run/bird.ctl > > Anyway if I run bird I get this error:Cannot create control socket > Address already in use > > >

Direct protocol affects BGP

2020-03-23 Thread Fabiano D'Agostino
Hi all, why if I disable the direct protocol the BGP routes are not imported/exported? If I run show route, it is empty, while if I enable the direct protocol show route has directly connected routes and BGP routes. My configuration is very easy, two routers make a eBGP peering and they import and

Re: Direct protocol affects BGP

2020-03-23 Thread Fabiano D'Agostino
gt; > > > Hi Fabio, > > > > the BGP nexthop field must be resolvable. In other words there must > be a > > route to the neighbor in RIB. > > > > Regards, > > Bene > > > > > > On 23.03.20 12:05, Fabian

Re: Direct protocol affects BGP

2020-03-23 Thread Fabiano D'Agostino
In FIB (birds internal table) the route is currently >> missing. >> If you enable the direct protocol a route for 192.168.2.22 will be >> appear in the FIB and the nexthop resolution will work. >> >> Is there a reason why you don't want to use the direct protocol? >&

Re: Direct protocol affects BGP

2020-03-23 Thread Fabiano D'Agostino
g from RIB and the other one coming from Bird. I tried protocol bgp { direct; }, but it doesn't change. Thanks, Fabiano Il giorno lun 23 mar 2020 alle ore 16:15 Bernd Naumann ha scritto: > On 23.03.20 16:01, Fabiano D'Agostino wrote: > > Hi Benedikt, > > I am just learning Bird and I didn

Re: Direct protocol affects BGP

2020-03-24 Thread Fabiano D'Agostino
y the router. Without any direct. > > > > Until one day we lose the bgp session, and we can ping the caches from > the RS but not reachable . Once we set it as direct on the bird then all is > fine. > > > > Question is why was it working before without direct ?? :=) > &g

Re: Direct protocol affects BGP

2020-03-24 Thread Fabiano D'Agostino
ers that causing it? Could you show your > config if it is not secret? > > On Tue, Mar 24, 2020 at 9:53 PM Fabiano D'Agostino > wrote: > > > > Yes, 'show route', is from Bird. I don't have route-reflector, but just > two routers which have a bgp session. Anyway, yes

Enable RPKI on Centos

2020-05-05 Thread Fabiano D'Agostino
Good evening, Before I was using Ubuntu and to enable the RPKI protocol I did: ./configure --enable-libssh. Now I am a new Centos7 user and I don't know really well how to enable RPKI. I downloaded bird2-2.0.6-1.el7.x86_64.rpm

Re: BGP password

2020-05-21 Thread Fabiano D'Agostino
net> ha scritto: > > Fabiano D'Agostino wrote on 2020-05-12 17:27: > > I am using BIRD 2, my configuration looks like the following: > > > > ipv4 table t4; > > > > protocol pipe { > > table master4; > > peer table t4; > > import all; >

roa_check RPKI

2020-10-10 Thread Fabiano D'Agostino
How does roa_check(roa_table,net,bgp_path.last) work? Having such a ROA as example: origin AS: 64513 prefix: 78.150.40.0/20 max mask: 24 and a BGP announcement: origin AS: 64514 prefix: 78.150.45.0/22 so it's as invalid, but how does this check work? roa_table: validated roa record (validated

Re: roa_check RPKI

2020-10-11 Thread Fabiano D'Agostino
Hi Alarig, I just invented some data to do the example and I wanted to understand given that example to what bgp_path.last refers to. Thanks, Il giorno sab 10 ott 2020 alle ore 23:29 Alarig Le Lay ha scritto: > I wrongly pasted your errors, but 78.150.32.0/20 and 78.150.44.0/22 are > the

Start BIRD automatically

2020-06-02 Thread Fabiano D'Agostino
Hi, how can BIRD automatically start after a reboot or a crash? Should I use systemd? I am using BIRD v2 on Ubuntu 20.04. Fabiano

Re: BIRD unknown character using text editor

2020-06-02 Thread Fabiano D'Agostino
e, Jun 2, 2020, at 11:55, Fabiano D'Agostino wrote: > > I am using a text editor on Windows to edit the bird.conf. When I get > > my bird.conf in my linux machine and I try bird -p I get this error at > > the end of the line: > > Unknown character > > > > But

Re: BIRD unknown character using text editor

2020-06-02 Thread Fabiano D'Agostino
ding on Windows is UTF-16 which is not compatible with > most UNIX software. > In Win10 Notepad, the File->Save As dialog has an Encoding drop-down where > you can change it. > -Adam > > On Jun. 2, 2020 06:56, Fabiano D'Agostino > wrote: > I am using a text editor on Wi

BIRD unknown character using text editor

2020-06-02 Thread Fabiano D'Agostino
I am using a text editor on Windows to edit the bird.conf. When I get my bird.conf in my linux machine and I try bird -p I get this error at the end of the line: Unknown character But everything is right. How can I solve? Thanks, Fabiano

Re: Start BIRD automatically

2020-06-02 Thread Fabiano D'Agostino
It seems that if bird.service is located in /etc/systemd/system sudo systemctl start bird.service is enough and when I reboot the system bird is running, indeed if I try sudo systemctl enable bird.service I get 'no such file or directory'. Instead if I place bird.service in /lib/systemd/system I

Re: Start BIRD automatically

2020-06-02 Thread Fabiano D'Agostino
Hi, thank you! It seems working. But do I have to execute sudo systemctl enable bird.service? Because I just did sudo systemctl start bird.service and it seems restarting after reboot Il giorno mar 2 giu 2020 alle ore 17:03 Toke Høiland-Jørgensen ha scritto: > "Fabiano D'Agostino&

Check filtered RPKI routes

2020-07-10 Thread Fabiano D'Agostino
Hi all, is there a way to check quickly filtered RPKI routes? I can check the syslog, but if I delete the log I think the only way to check filtered routes (having import keep filtered enabled) is: show route table table_name all filtered but having a lot of tables it is not easy to handle this

Static routes BGP

2020-06-15 Thread Fabiano D'Agostino
? Thanks in advance, Fabiano D'Agostino