@rubic:
@jimp:
That may be a completely separate error from this.
I think the error is this commit related. While Quagga OSPF 0.99.20.1 v0.5.0 works fine in my production environment, in my fresh test setup with Quagga OSPF 0.99.20.1 v0.5.1 any value in the "Disable Redistribution" field prevents the service to start.
Ah this way I can try it, too:
[2.1-BETA1][root@fw1.zws8.local]/root(134): /usr/local/bin/quaggactl start
There is no such command.
Error occured during reading below line.
distribute-list dnr-list out connected
mmmh… I've tested my patch and it worked with several config modifications/reboots in my test setup... so a little surprising that it's now damaging OSPF package... sorry.
Without my above fix it works again.
router ospf
ospf router-id 192.168.6.3
log-adjacency-changes detail
redistribute connected
redistribute static
network 192.168.6.0/24 area 192.168.6.0
distribute-list dnr-list out connected
distribute-list dnr-list out kernel
distribute-list dnr-list out static
access-list dnr-list deny xx.xx.176.0/24
access-list dnr-list permit any
One problem / unknown difference:
I have one stable/old pfSense 2.0.1 pair and actual pfSense 2.1-BETA1 pair on other side…
The stable version didn't redistribute the network:
[2.0.1-RELEASE][root@fw1.jws1.local]/root(133): vtysh
Hello, this is Quagga (version 0.99.20.1).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
fw1.jws1.local# sh ip route
Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,
I - ISIS, B - BGP, > - selected route, * - FIB route
K>* 0.0.0.0/0 via 91.102.12.193, lagg0_vlan2
O xx.xx.176.0/24 [110/20] via 192.168.6.12, lagg1_vlan6, 00:31:09
via 192.168.6.13, lagg1_vlan6, 00:31:09
C * xx.xx.176.0/24 is directly connected, vip47
C>* xx.xx.176.0/24 is directly connected, lagg0_vlan7
C>* xx.xx.176.4/32 is directly connected, vip40
C>* xx.xx.176.7/32 is directly connected, vip49
…
but BETA does?
[2.1-BETA1][root@fw1.zws8.local]/root(139): vtysh
Hello, this is Quagga (version 0.99.21).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
fw1.zws8.local# show ip route
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, A - Babel,
> - selected route, * - FIB route
K>* 0.0.0.0/0 via xx.xx.176.254, lagg0_vlan7
O xx.xx.176.0/24 [110/20] via 192.168.6.13, lagg0_vlan6, 00:24:14
C * xx.xx.176.0/24 is directly connected, opt14_vip120
C * xx.xx.176.0/24 is directly connected, opt14_vip117
C * xx.xx.176.0/24 is directly connected, opt14_vip103
C * xx.xx.176.0/24 is directly connected, opt14_vip119
C * xx.xx.176.0/24 is directly connected, opt14_vip118
C * xx.xx.176.0/24 is directly connected, opt14_vip116
C * xx.xx.176.0/24 is directly connected, opt14_vip115
C * xx.xx.176.0/24 is directly connected, opt14_vip114
C * xx.xx.176.0/24 is directly connected, opt14_vip109
C>* xx.xx.176.0/24 is directly connected, lagg0_vlan7
…
I tested before only with BETA versions… and got problems with public routing.
(1st firewall pair got .1/.2/.3, 2nd fw pair .254/.253/.252)
Because without this "Disable Redistribution" of this public network the firewalls didn't saw itselfes and therefore shutting down their gateways.
ah... different BSD package versions which causes the problem:
2.0.1 => Hello, this is Quagga (version 0.99.20.1).
2.1-BETA1 => Hello, this is Quagga (version 0.99.21).
so please remove my patch… and we must search for other places to patch the behavior in package for 2.1...
Thanks.
Bests
Reiner
