Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Nov 2017 10:26:48 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 223835] BGP session not established with md5 password via FRRouting
Message-ID:  <bug-223835-8-lXGhkIwtLS@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-223835-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-223835-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D223835

--- Comment #3 from Andrey V. Elsukov <ae@FreeBSD.org> ---
(In reply to Alexey from comment #2)
> flush;
> add  185.1.62.241 185.1.62.69 tcp 0x1000 -A tcp-md5 "some_password";
> add 185.1.62.69 185.1.62.241 tcp 0x1001 -A tcp-md5 "some_password";
>=20
> I also do this /etc/rc.d/ipsec reload
>=20
> [root@gate /home/pautina]# setkey -D
> 185.1.62.69 185.1.62.241
>         tcp mode=3Dany spi=3D4097(0x00001001) reqid=3D0(0x00000000)
>         A: tcp-md5  6a757472 616e3764 45625577 72366339
>         allocated: 0    hard: 0 soft: 0
>         sadb_seq=3D1 pid=3D55761 refcnt=3D1
> 185.1.62.241 185.1.62.69
>         tcp mode=3Dany spi=3D4096(0x00001000) reqid=3D0(0x00000000)
>         A: tcp-md5  6a757472 616e3764 45625577 72366339
>         allocated: 0    hard: 0 soft: 0
>         sadb_seq=3D0 pid=3D55761 refcnt=3D1
> But BGP session state at Connect.

It seems SAs are not matched by any packets.
Check what addresses uses daemon and also check what shows `netstat -sp tcp=
 |
grep sig`

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-223835-8-lXGhkIwtLS>