Good day,
I have an issue with the BGP routing. I use prefix-lists and add them to a route map.
I get this error msg:
[VAKV3-NMY7B][EC 100663337] error processing configuration change: error [internal inconsistency] event [apply] operation [modify] xpath [/frr-route-map:lib/route-map[name='rt_bgp_map']/entry[sequence='10']/match-condition[condition='ipv4-prefix-list']/rmap-match-condition/list-name]
So the error msg points me to the prefix lists but I can't determine what is wrong with the prefix lists.
vtysh -c "show running-config"
Current configuration:
!
frr version 8.5.3
frr defaults traditional
hostname hostname
log syslog informational
!
router bgp 64720
no bgp ebgp-requires-policy
no bgp default ipv4-unicast
neighbor 10.113.255.0 remote-as 64512
neighbor 10.113.255.0 update-source ipsec10
neighbor 10.113.255.0 timers 1 5
neighbor 10.113.255.0 timers connect 2
neighbor 10.113.255.8 remote-as 64841
neighbor 10.113.255.8 update-source ipsec30
neighbor 10.113.255.8 timers 1 5
neighbor 10.113.255.8 timers connect 2
neighbor 10.113.255.17 remote-as 64729
neighbor 10.113.255.17 update-source ipsec50
neighbor 10.113.255.17 timers 1 5
neighbor 10.113.255.17 timers connect 2
!
address-family ipv4 unicast
redistribute connected
neighbor 10.113.255.0 activate
neighbor 10.113.255.0 weight 200
neighbor 10.113.255.0 route-map rt_bgp_map out
neighbor 10.113.255.8 activate
neighbor 10.113.255.8 weight 99
neighbor 10.113.255.8 route-map rt_bgp_map out
neighbor 10.113.255.17 activate
neighbor 10.113.255.17 weight 98
neighbor 10.113.255.17 route-map rt_bgp_map out
exit-address-family
!
address-family ipv6 unicast
redistribute connected
exit-address-family
exit
!
ip prefix-list acl_bgp_filter_out seq 10 deny x.x.x.x/29
ip prefix-list acl_bgp_filter_out seq 11 deny x.x.x.x/30
ip prefix-list acl_bgp_filter_out seq 999 permit 0.0.0.0/0 le 32
!
route-map rt_bgp_map permit 10
exit
!
end
# nano /usr/local/etc/frr/bgpd.conf
GNU nano 7.2 /usr/local/etc/frr/bgpd.conf Modified
neighbor 10.113.255.17 remote-as 64729
neighbor 10.113.255.17 weight 98
neighbor 10.113.255.17 update-source ipsec50
neighbor 10.113.255.17 timers 5 5
neighbor 10.113.255.17 timers connect 2
address-family ipv4 unicast
redistribute connected
neighbor 10.113.255.0 activate
neighbor 10.113.255.0 route-map rt_bgp_map out
neighbor 10.113.255.17 activate
neighbor 10.113.255.17 route-map rt_bgp_map out
exit-address-family
!
address-family ipv6 unicast
redistribute connected
exit-address-family
!
ip prefix-list acl_bgp_filter_out seq 10 deny x.x.x.x/29
!
ip prefix-list acl_bgp_filter_out seq 11 deny x.x.x.x/30
!
ip prefix-list acl_bgp_filter_out seq 999 permit 0.0.0.0/0 le 32
!
!
!
!
route-map rt_bgp_map permit 10
match ip address prefix-list acl_bgp_filter_out
!
!
!
line vty
!
When I compare the two outputs I see only the difference
vtysh
route-map rt_bgp_map permit 10
/usr/local/etc/frr/bgpd.conf
route-map rt_bgp_map permit 10
match ip address prefix-list acl_bgp_filter_out
OPNsense 23.7.6-amd64 is running on both systems.
Now I wonder if I have overlooked anything in the configuration. Maybe someone has an idea what I can still check. Thanks a lot,
MaDe
If you remove the prefix-list object from the route-map seq 10, and let the route-map applied on the neighbor, do you get the same error?
Regards,
S.
No errors when I remove the prefix-list from the route map
address-family ipv4 unicast
redistribute connected
neighbor 10.113.255.0 activate
neighbor 10.113.255.0 route-map rt_bgp_map out
neighbor 10.113.255.17 activate
neighbor 10.113.255.17 route-map rt_bgp_map out
exit-address-family
!
address-family ipv6 unicast
redistribute connected
exit-address-family
!
ip prefix-list acl_bgp_filter_out seq 10 deny x.x.x.x/29
!
ip prefix-list acl_bgp_filter_out seq 11 deny x.x.x.x/30
!
ip prefix-list acl_bgp_filter_out seq 999 permit 0.0.0.0/0 le 32
!
!
!
!
route-map rt_bgp_map permit 10
!
!
!
line vty
!
I am running into a similar problem but with OSPF:
[VAKV3-NMY7B][EC 100663337] error processing configuration change: error [internal inconsistency] event [apply] operation [modify] xpath [/frr-route-map:lib/route-map[name='Redistribution']/entry[sequence='10']/match-condition[condition='ipv4-prefix-list']/rmap-match-condition/list-name]
I am wondering if it has to do with "le" in the route-map:
ip prefix-list acl_bgp_filter_out seq 999 permit 0.0.0.0/0 le 32
this only started happening after upgrading to version 23.7.6
We're having the same issue after upgrading. Must be a bug?
[VAKV3-NMY7B][EC 100663337] error processing configuration change: error [internal inconsistency] event [apply] operation [modify] xpath [/frr-route-map:lib/route-map[name='Redistribution']/entry[sequence='10']/match-condition[condition='ipv4-prefix-list']/rmap-match-condition/list-name]
Opened issues:
https://github.com/FRRouting/frr/issues/14626
https://github.com/opnsense/plugins/issues/3630
I am having the same issue as well since last update
same issue here after last update