Pfsense 2.4.4 FRR 0.6_77 as path prepending not working

emiliano.angieri

Hi Everyone,

We have a Pfsense v. 2.4.4 (that we need to upgrade in the incoming months) and BGP routing with FRR 0.6_77.
We configured a VPN with AWS with three different tunnel VPN (with 3 dedicated public ips).

Everything seems working properly, except about AS PATH PREPEND.
In route map we configured Local Preference and as path prepend.
The local preference are working, instead the as path prepend is not propagated from BGP.

Below our config file.
Is there any known bug with this version of FRR about as path prepending?
We tested the as path prepend with the version 1.10 and it seems work.

Any help?
Kind Regards,

##################### DO NOT EDIT THIS FILE! ######################
###################################################################
# This file was created by an automatic configuration generator.  #
# The contents of this file will be overwritten without warning!  #
###################################################################

password ....

# BGP Config
router bgp 65000
  timers bgp 10 30
  address-family ipv4 unicast
   network 192.0..../22
   network 192.1...../22
  exit-address-family 

  # BGP Neighbors
  neighbor vpc-0c7ea7.... peer-group
  neighbor vpc-0c7ea..... remote-as 64512
  neighbor vpc-0c7ea.... description vpc-..... group
  no neighbor vpc-0c7..... send-community
  neighbor 169.254.9.25 peer-group vpc-0c7ea7cbd96c5ec1f
  neighbor 169.254.9.25 description 169.254.9.25 - v... Tunnel1
  neighbor 169.254.9.25 update-source 169.254.9.26
  address-family ipv4 unicast
    neighbor 169.254.9.25 activate
    neighbor 169.254.9.25 peer-group vpc-0c7ea.....
    no neighbor 169.254.9.25 send-community
    neighbor 169.254.9.25 route-map vpn-priority3 in
    neighbor 169.254.9.25 route-map vpn-priority3 out
  exit-address-family 
  neighbor 169.254.126.197 peer-group vpc-0c7e....
  neighbor 169.254.126.197 description 169.254.126.197 - v... Tunnel2
  neighbor 169.254.126.197 update-source 169.254.126.198
  address-family ipv4 unicast
    neighbor 169.254.126.197 activate
    neighbor 169.254.126.197 peer-group vpc-0c7ea....
    no neighbor 169.254.126.197 send-community
    neighbor 169.254.126.197 route-map vpn-priority4 in
    neighbor 169.254.126.197 route-map vpn-priority4 out
  exit-address-family 
  neighbor 169.254.46.89 peer-group vpc-0c7...
  neighbor 169.254.46.89 description 169.254.46.89 - Vi... Tunnel1
  neighbor 169.254.46.89 update-source 169.254.46.90
  address-family ipv4 unicast
    neighbor 169.254.46.89 activate
    neighbor 169.254.46.89 peer-group vpc-0c7...
    no neighbor 169.254.46.89 send-community
    neighbor 169.254.46.89 route-map vpn-priority1 in
    neighbor 169.254.46.89 route-map vpn-priority1 out
  exit-address-family 
  neighbor 169.254.163.197 peer-group vpc-0c7ea7cbd96c5ec1f
  neighbor 169.254.163.197 description 169.254.163.197 - Vi... Tunnel2
  neighbor 169.254.163.197 update-source 169.254.163.198
  address-family ipv4 unicast
    neighbor 169.254.163.197 activate
    neighbor 169.254.163.197 peer-group vpc-0c7....
    no neighbor 169.254.163.197 send-community
    neighbor 169.254.163.197 route-map vpn-priority2 in
    neighbor 169.254.163.197 route-map vpn-priority2 out
  exit-address-family 
  neighbor 169.254.178.177 peer-group vpc-0c7ea...
  neighbor 169.254.178.177 description 169.254.178.177 - T...Tunnel1
  neighbor 169.254.178.177 update-source 169.254.178.178
  address-family ipv4 unicast
    neighbor 169.254.178.177 activate
    neighbor 169.254.178.177 peer-group vpc-0c7ea...
    no neighbor 169.254.178.177 send-community
    neighbor 169.254.178.177 route-map vpn-priority5 in
    neighbor 169.254.178.177 route-map vpn-priority5 out
  exit-address-family 
  neighbor 169.254.75.37 peer-group vpc-0c7e...
  neighbor 169.254.75.37 description 169.254.75.37 - T... Tunnel2
  neighbor 169.254.75.37 update-source 169.254.75.38
  address-family ipv4 unicast
    neighbor 169.254.75.37 activate
    neighbor 169.254.75.37 peer-group vpc-0c7ea...
    no neighbor 169.254.75.37 send-community
    neighbor 169.254.75.37 route-map vpn-priority6 in
    neighbor 169.254.75.37 route-map vpn-priority6 out
  exit-address-family 

# Route Maps
route-map vpn-priority1 permit 100
  set local-preference 600
route-map vpn-priority2 permit 100
  set local-preference 500
  set as-path 65000
route-map vpn-priority3 permit 100
  set local-preference 400
  set as-path 65000 65000
route-map vpn-priority4 permit 100
  set local-preference 300
  set as-path 65000 65000 65000
route-map vpn-priority5 permit 100
  set local-preference 200
  set as-path 65000 65000 65000 65000
route-map vpn-priority6 permit 100
  set local-preference 100
  set as-path 65000 65000 65000 65000 65000

code_text

emiliano.angieri

My Fault.
in AS PATH BGP i configure "set" instead of "set prepend".