FRR BGP not distributing IPv6

Ofloo

Figrued out what the problem was, I recently added a null route for a specific IP range.

It added:

ip route 172.31.0.0/20 Null0
......
!
route-map AllowAll permit 100
!
ip prefix-list ACCEPTFILTER seq 10 deny 172.31.0.0/20
ip prefix-list ACCEPTFILTER seq 20 permit any
!
route-map ACCEPTFILTER permit 10
 match ip address prefix-list ACCEPTFILTER
!
ip protocol bgp route-map ACCEPTFILTER
!
ip protocol ospf route-map ACCEPTFILTER
!
ipv6 protocol bgp route-map ACCEPTFILTER
!
ipv6 protocol ospf6 route-map ACCEPTFILTER
!
line vty
!
end

but it didn't add something like

ipv6 prefix-list ACCEPTFILTER seq 20 permit any

Not sure if that works though but my point is just by adding a null route IPv6 was completely blocked.

beermount

@ofloo

Same problem here. when I enable the accept filter on a OSPF interface, the ACCEPTFILTER is updated which for me breaks both.

ipv6 protocol bgp route-map ACCEPTFILTER
ipv6 protocol ospf6 route-map ACCEPTFILTER

If I copy the running frr.conf and remove those two lines. The routes start being installed into FIB again.

Ofloo

@beermount not sure if it's a bug, I think it's more a misconfiguration on our end however, you would assume null routing a IPv4 subnet, that it wouldn't break IPv6 routing?

I mean configuration is set to accept all, however adding a null route seems to still accept all IPv4 but for some reason someone forgot about IPv6?

beermount

@ofloo

I'm not sure I agree. To me it seems like when an ipv4 prefix-list is added to a ipv6 protocol, no ipv6 routes are installed into FIB.

beermount

@beermount

I have one pfSense installation on 2.4.5p1 with FRR 0.6.7_6, which seems to be before this commit https://github.com/pfsense/FreeBSD-ports/commit/5f459e9c4810d0ff57b12d653365f48ca326479f#diff-0a542d78492d5e816f347ae5af25f282f04d668c91272f0411f7d0e4fd350b1aR652-R664 which seems to have introduced the problem with ospf6 and bgp ipv6.

viktor_g

Redmine issue created:
https://redmine.pfsense.org/issues/12815

beermount

@viktor_g
That was fast! =) Any idea how long it will be until a new package is available?

beermount

Additional request, could the global route handling section also be made ipv6 aware?

viktor_g

@beermount said in FRR BGP not distributing IPv6:

Additional request, could the global route handling section also be made ipv6 aware?

Please create a new bugreport;
https://docs.netgate.com/pfsense/en/latest/development/bug-reports.html

viktor_g

@beermount said in FRR BGP not distributing IPv6:

@viktor_g
That was fast! =) Any idea how long it will be until a new package is available?

In a few hours

beermount

@viktor_g
Issue created https://redmine.pfsense.org/issues/12820