Hi All,
I'm newbie in openbgpd, I have problem that i dont have direct nexthop form
one of my upstreams.Here is my status:
My OpenBSD# uname -aOpenBSD gw.xxx.com 5.6 GENERIC.MP#333 amd64
My Openbgpd status:
# bgpctl shNeighbor         AS    MsgRcvd    MsgSent  OutQ Up/Down
 State/PrfRcvdNEI1           242xx    1393514       2473     0
00:08:13 539485NEI2            452xx    1500655      21864     0
00:07:41 530950NEI3           452xx      59730    1120001     0
00:08:15  10844

# bgpctl sh nexthopFlags: * = nexthop valid
  Nexthop         Route              Prio Gateway        
Iface* 124.40.xxx.xx   124.40.xxx.xx/30      4 connected       vlan124
(UP, 1000 Mbps)* 124.40.xxx.xx   124.40.xxx.xx/30      4 connected    
  vlan125 (UP, 1000 Mbps)  124.158.xxx.x    <=== this is vlan105
# bgpctl sh intInterface      Nexthop state  Flags          Link
statevlan105        ok             UP             Ethernet,
active, 1000 MBit/spflog0         ok             UP          
  unknownvlan23         ok             UP            
Ethernet, active, 1000 MBit/svlan22         ok             UP    
        Ethernet, active, 1000 MBit/svlan21         ok          
  UP             Ethernet, active, 1000 MBit/svlan15         ok  
          UP             Ethernet, active, 1000 MBit/svlan125    
   ok             UP             Ethernet, active, 1000
MBit/svlan124        ok             UP             Ethernet,
active, 1000 MBit/surndis0        invalid                      
Ethernet, unknownlo0            ok             UP          
  unknownenc0           invalid                      
activebge1           ok             UP             Ethernet,
active, 1000 MBit/sbge0           ok             UP          
  Ethernet, active, 1000 MBit/s
# route -nv get 124.158.xxx,xso_dst: inet 124.158.xxx.x; so_ifp: link ;
RTM_GET: Report Metrics: len 144, priority 0, table 0, pid: 0, seq 1, errno
0flags:<UP,GATEWAY,HOST,STATIC>use:        0   mtu:        0  
 expire:        0locks:  inits:sockaddrs: <DST,IFP> 124.158.xxx.x
link#0   route to: 124.158.xxx.xdestination: 124.158.xxx.x  interface:
vlan105 if address: 124.158.xxx.x   priority: 4 (connected)      flags:
<UP,HOST,DONE,LLINFO,CLONED>     use       mtu    expire   36294  
      0       676
locks:  inits:sockaddrs: <DST,GATEWAY,IFP,IFA> 124.158.xxx.x
00:22:83:19:cc:1f 6c:ae:8b:5a:65:40 124.158.xxx.xx
And here is mu bgpd.conf
AS 457xxrouter-id 202.43.xx.xxxsocket "/var/run/bgpd.sock"holdtime 180holdtime
min 3log updateslisten on 127.0.0.1listen on 124.40.xxx.xxlisten on
124.40.xxx.xxlisten on 124.158.xxx.xxlisten on 202.43.xx.xxxlisten on
202.43.xx.xxxlisten on 202.43.xx.xxxnexthop qualify via bgpfib-priority
48network 202.43.xx.0/23network 202.43.xx.0/24network 202.43.xx.0/24network
202.43.xx.xxx/29 set { localpref 500 }network 202.43.xx.xxx/29 set { localpref
500 }network 202.43.xx.xxx/29 set { localpref 500 }network 124.40.xxx.xx/30
set { localpref 500 }network 124.40.xxx.xx/30 set { localpref 500 }network
124.158.xxx.x/30 set { localpref 500 }

rde rib Adj-RIB-In no evaluaterde rib Loc-RIB rtable 0 fib-update yes

group "upstream" {        neighbor 124.158.xxx.x {               
descr "NEI3"                remote-as 242xx               
multihop 2                announce all                enforce
neighbor-as yes                announce IPv4 unicast           
    softreconfig in yes                softreconfig out yes     
  }        neighbor 124.40.xxx.xx {                descr "NEI2" 
              remote-as 452xx                multihop 2     
          announce all                enforce neighbor-as yes 
              announce IPv4 unicast                softreconfig
in yes                softreconfig out yes        }       
neighbor 124.40.xxx.xx {                descr "NE2_2"           
    remote-as 452xx                multihop 2               
announce all                enforce neighbor-as yes           
    announce IPv4 unicast                softreconfig in yes     
          softreconfig out yes        }}

match from 124.40.xxx.xx set { localpref 600 nexthop 124.40.xxx.xx rtlabel iix
}match from 124.40.xxx.xx set { localpref 600 nexthop 124.40.xxx.xx rtlabel
internet }match from 124.158.xxx.x set { localpref 600 nexthop 124.158.xxx.x
rtlabel internet2 }deny from anydeny to group "upstream" prefix 0.0.0.0/0
prefixlen > 24deny quick to group "upstream" source-as 77xxdeny quick to group
"upstream" source-as 75xxdeny quick to group "upstream" source-as 452xxdeny
quick to group "upstream" source-as 242xxdeny quick to group "upstream"
peer-as 77xxdeny quick to group "upstream" peer-as 75xxdeny quick to group
"upstream" peer-as 452xxdeny quick to group "upstream" peer-as 242xxdeny quick
to group "upstream" transit-as 77xxdeny quick to group "upstream" transit-as
75xxdeny quick to 124.158.xxx.x peer-as 77xxdeny quick to 124.158.xxx.x
peer-as 75xxdeny quick to 124.158.xxx.x source-as 77xxdeny quick to
124.158.xxx.x source-as 75xxdeny quick to 124.158.xxx.x transit-as 77xxdeny
quick to 124.158.xxx,x transit-as 75xxdeny quick to 124.40.xxx.xx peer-as
77xxdeny quick to 124.40.xxx.xx peer-as 75xxdeny quick to 124.40.xxx.xx
source-as 77xxdeny quick to 124.40.xxx.xx source-as 75xxdeny quick to
124.40.xxx.xx transit-as 77xxdeny quick to 124.40.xxx.xx transit-as 75xxdeny
quick to 124.158.xxx.x prefix 218.100.xx.0/24deny quick to 124.40.xxx.x prefix
218.100.xx.0/24deny quick to 124.158.244.9 prefix 218.100.xx.0/24deny quick to
124.40.252.85 prefix 218.100.xx.0/24allow from group "upstream" prefix
0.0.0.0/0 prefixlen 8 - 24allow to group "upstream" prefix 0.0.0.0/0 prefixlen
8 - 30deny from any prefix 0.0.0.0/0deny from any prefix 10.0.0.0/8 prefixlen
>= 8deny from any prefix 100.64.0.0/10 prefixlen >= 10deny from any prefix
127.0.0.0/8 prefixlen >= 8deny from any prefix 169.254.0.0/16 prefixlen >=
16deny from any prefix 172.16.0.0/12 prefixlen >= 12deny from any prefix
192.0.2.0/24 prefixlen >= 24deny from any prefix 192.168.0.0/16 prefixlen >=
16deny from any prefix 198.18.0.0/15 prefixlen >= 15deny from any prefix
198.51.100.0/24 prefixlen >= 24deny from any prefix 203.0.113.0/24 prefixlen
>= 24deny from any prefix 224.0.0.0/4 prefixlen >= 4deny from any prefix
240.0.0.0/4 prefixlen >= 4
Can anyone tell where is wrong?
Regards,Kabayan

Reply via email to