FRR BGP not distributing IPv6

Ofloo

For some reason it is not distributing IPv6 networks listed under "Networks to Distribute".

Always worked like this just noticed it stopped working not sure if it came after an update, ..

Ofloo

Figrued out what the problem was, I recently added a null route for a specific IP range.

It added:

ip route 172.31.0.0/20 Null0
......
!
route-map AllowAll permit 100
!
ip prefix-list ACCEPTFILTER seq 10 deny 172.31.0.0/20
ip prefix-list ACCEPTFILTER seq 20 permit any
!
route-map ACCEPTFILTER permit 10
 match ip address prefix-list ACCEPTFILTER
!
ip protocol bgp route-map ACCEPTFILTER
!
ip protocol ospf route-map ACCEPTFILTER
!
ipv6 protocol bgp route-map ACCEPTFILTER
!
ipv6 protocol ospf6 route-map ACCEPTFILTER
!
line vty
!
end

but it didn't add something like

ipv6 prefix-list ACCEPTFILTER seq 20 permit any

Not sure if that works though but my point is just by adding a null route IPv6 was completely blocked.

beermount

@ofloo

Same problem here. when I enable the accept filter on a OSPF interface, the ACCEPTFILTER is updated which for me breaks both.

ipv6 protocol bgp route-map ACCEPTFILTER
ipv6 protocol ospf6 route-map ACCEPTFILTER

If I copy the running frr.conf and remove those two lines. The routes start being installed into FIB again.

Ofloo

@beermount not sure if it's a bug, I think it's more a misconfiguration on our end however, you would assume null routing a IPv4 subnet, that it wouldn't break IPv6 routing?

I mean configuration is set to accept all, however adding a null route seems to still accept all IPv4 but for some reason someone forgot about IPv6?

beermount

@ofloo

I'm not sure I agree. To me it seems like when an ipv4 prefix-list is added to a ipv6 protocol, no ipv6 routes are installed into FIB.

beermount

@beermount

I have one pfSense installation on 2.4.5p1 with FRR 0.6.7_6, which seems to be before this commit https://github.com/pfsense/FreeBSD-ports/commit/5f459e9c4810d0ff57b12d653365f48ca326479f#diff-0a542d78492d5e816f347ae5af25f282f04d668c91272f0411f7d0e4fd350b1aR652-R664 which seems to have introduced the problem with ospf6 and bgp ipv6.

viktor_g

Redmine issue created:
https://redmine.pfsense.org/issues/12815

beermount

@viktor_g
That was fast! =) Any idea how long it will be until a new package is available?

beermount

Additional request, could the global route handling section also be made ipv6 aware?

viktor_g

@beermount said in FRR BGP not distributing IPv6:

Additional request, could the global route handling section also be made ipv6 aware?

Please create a new bugreport;
https://docs.netgate.com/pfsense/en/latest/development/bug-reports.html

viktor_g

@beermount said in FRR BGP not distributing IPv6:

@viktor_g
That was fast! =) Any idea how long it will be until a new package is available?

In a few hours

beermount

@viktor_g
Issue created https://redmine.pfsense.org/issues/12820