OPNsense Forum
Archive => 20.7 Legacy Series => Topic started by: knroftz23 on June 25, 2021, 11:11:32 am
-
Hello,
I would like to use BGP routing, but my BGP router does not send or receive any packets. What irritates me most is that my router is not sending any packets to its neighbor.
I'm doing something fundamentally wrong. I no longer have any idea what I'm doing wrong.
Current configuration:
!
frr version 7.4
frr defaults traditional
hostname fw01.test.local
log syslog notifications
!
router bgp 6500
bgp router-id 192.168.254.2
no bgp ebgp-requires-policy
neighbor 192.168.254.1 remote-as 6501
neighbor 192.168.254.1 ebgp-multihop 255
neighbor 192.168.254.1 update-source bge1
!
address-family ipv4 unicast
network 192.168.10.0/24
neighbor 192.168.254.1 next-hop-self
exit-address-family
!
line vty
!
end
sh ip bgp neighbors
BGP neighbor is 192.168.254.1, remote AS 6501, local AS 6500, external link
BGP version 4, remote router ID 0.0.0.0, local router ID 192.168.254.2
BGP state = Active
Last read 00:20:53, Last write never
Hold time is 180, keepalive interval is 60 seconds
Graceful restart information:
Local GR Mode: Helper*
Remote GR Mode: NotApplicable
R bit: False
Timers:
Configured Restart Time(sec): 120
Received Restart Time(sec): 0
Message statistics:
Inq depth is 0
Outq depth is 0
Sent Rcvd
Opens: 0 0
Notifications: 0 0
Updates: 0 0
Keepalives: 0 0
Route Refresh: 0 0
Capability: 0 0
Total: 0 0
Minimum time between advertisement runs is 0 seconds
Update source is bge1
For address family: IPv4 Unicast
Not part of any update group
NEXT_HOP is always this router
Community attribute sent to this neighbor(all)
0 accepted prefixes
Connections established 0; dropped 0
Last reset 00:20:53, Waiting for peer OPEN
External BGP neighbor may be up to 255 hops away.
BGP Connect Retry Timer in Seconds: 120
Next connect timer due in 113 seconds
Read thread: off Write thread: off FD used: -1
sh bgp summary
IPv4 Unicast Summary:
BGP router identifier 192.168.254.2, local AS number 6500 vrf-id 0
BGP table version 1
RIB entries 1, using 192 bytes of memory
Peers 1, using 14 KiB of memory
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt
192.168.254.2 4 6501 0 0 0 0 0 never Active 0
Total number of neighbors 1
-
In the firewall log I see packets from the neighbor and I see packets coming from my wan interface. (port 179)
-
bgpd[43001]: can't connect to 192.168.254.1 fd 19 : Permission denied
what does this error message mean? I would have expected an connection refused error.
-
That means a problem with the routing daemon or better say the user it is running on.