Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    BGP failing. arpresolve: can't allocate llinfo for

    Scheduled Pinned Locked Moved Routing and Multi WAN
    4 Posts 2 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E Offline
      exposer
      last edited by

      Hi

      We are running a test together with our ISP to use a local BGP towards them. I was hoping this was going to be quick and easy, so we could put it out in production.. But, that not the case here - yet….

      Both PFsense are online, ISP announced the linknets and gateway. The routed subnet and carp are also working 100%.
      Its working for a little while. Minutes, half hour/hour. Then one of the firewalls cant get online anymore. It looks like its random which firewall that looses connectivity. It doesnt seem like the bgpsessions from that firewall and isp are talking. Last update: many minutes/hours

      I know that the isp set up a route map yesterday to be able to control the failover on the routed subnet. Looks like thats working when I test with both firewalls (when both are online...)

      1 week ago we tried to setup bgp with carp status ip, but then the failover is kind of slow and I cant get the secondary firewall online (not getting its routes from bgp, therefor the linknet isnt online).

      dmesg in both firewalls are getting spammed with these:

      fw1:
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0
      arpresolve: can't allocate llinfo for xx.175.30.xx on bge0

      Also getting error on other waninterface on fw1, just not right now.

      fw2:
      arpresolve: can't allocate llinfo for xx.28.7.105 on bge0
      arpresolve: can't allocate llinfo for xx.28.7.105 on bge0
      arpresolve: can't allocate llinfo for xx.28.7.109 on em0
      arpresolve: can't allocate llinfo for xx.28.7.109 on em0
      arpresolve: can't allocate llinfo for xx.28.7.109 on em0
      arpresolve: can't allocate llinfo for xx.28.7.105 on bge0
      arpresolve: can't allocate llinfo for xx.28.7.109 on em0

      All I need to do to get the failing firewall online is ifconfig bge0/em0 down and up. Then its reconnecting the bgpsessions and get the routes.

      BGP raw config:

      This file was created by the package manager. Do not edit!

      AS xxxxx
      fib-update yes
      holdtime 30
      listen on 0.0.0.0
      network xx.160.227.208/28
      network xx:270:203F::/48
      group "Kvantel" {
      remote-as xxxx
      neighbor xx.175.30.81 {
      descr "KvantelMaster"
      announce all 
      set localpref 101
      local-address xx.175.30.82
      }
      neighbor xx.175.30.85 {
      descr "KvantelSlave"
      announce all 
      set localpref 100
      local-address xx.175.30.86
      }
      neighbor xx:270:1:56::1 {
      descr "KvantelMasterIPv6"
      announce all 
      set localpref 101
      local-address xx:270:1:56::2
      }
      neighbor xx:270:1:56:4000::1 {
      descr "KvantelSlaveIPv6"
      announce all 
      set localpref 100
      local-address xx:270:1:56:4000::2
      }
      }
      deny from any
      deny to any
      allow from xx.175.30.81
      allow to xx.175.30.81
      allow from xx.175.30.85
      allow to xx.175.30.85
      allow from xx:270:1:56::1
      allow to xx:270:1:56::1
      allow from xx:270:1:56:4000::1
      allow to xx:270:1:56:4000::1

      ![Visio PFSense HA.png](/public/imported_attachments/1/Visio PFSense HA.png)
      ![Visio PFSense HA.png_thumb](/public/imported_attachments/1/Visio PFSense HA.png_thumb)

      1 Reply Last reply Reply Quote 0
      • E Offline
        exposer
        last edited by

        Anyone?

        1 Reply Last reply Reply Quote 0
        • E Offline
          exposer
          last edited by

          Tested with a new pfsense/hardware today.

          Only with one firewall and two neighbors (isp master/slave).

          Still getting arp error in syslog..

          arp against slave is also down (so is the bgp.)

          [2.3.4-RELEASE][root@pfSense.localdomain]/root: dmesg
          arpresolve: can't allocate llinfo for xx.175.30.85 on igb1
          arpresolve: can't allocate llinfo for xx.175.30.85 on igb1
          arpresolve: can't allocate llinfo for xx.175.30.85 on igb1
          arpresolve: can't allocate llinfo for xx.175.30.85 on igb1
          arpresolve: can't allocate llinfo for xx.175.30.85 on igb1

          1 Reply Last reply Reply Quote 0
          • H Offline
            heper
            last edited by

            I get that error when cable modem goes offline.
            Never used bgp,  so can't help there

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.