From owner-freebsd-net@FreeBSD.ORG  Tue Jan  3 17:47:39 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 191EE106564A;
	Tue,  3 Jan 2012 17:47:39 +0000 (UTC)
	(envelope-from borjam@sarenet.es)
Received: from proxypop03.sare.net (proxypop03.sare.net [194.30.0.207])
	by mx1.freebsd.org (Postfix) with ESMTP id CD8EA8FC13;
	Tue,  3 Jan 2012 17:47:38 +0000 (UTC)
Received: from [172.16.2.2] (izaro.sarenet.es [192.148.167.11])
	by proxypop03.sare.net (Postfix) with ESMTPSA id 1CE479DC522;
	Tue,  3 Jan 2012 18:47:36 +0100 (CET)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Borja Marcos <borjam@sarenet.es>
In-Reply-To: <20120103152909.GA83706@sandvine.com>
Date: Tue, 3 Jan 2012 18:47:35 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <6FE9FF15-487F-4A31-AEE0-A0AD92F5DC72@sarenet.es>
References: <99A5FFD9-8815-4CCC-9868-FB2E3D799566@gridfury.com>
	<4F027BC0.1080101@FreeBSD.org>
	<8F87C898-3290-41B9-ACDF-3558D7C28D74@gmail.com>
	<20120103152909.GA83706@sandvine.com>
To: Ed Maste <emaste@freebsd.org>
X-Mailer: Apple Mail (2.1084)
Cc: Nikolay Denev <ndenev@gmail.com>, freebsd-net@freebsd.org
Subject: Re: openbgpds not talking each other since 8.2-STABLE upgrade
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jan 2012 17:47:39 -0000


On Jan 3, 2012, at 4:29 PM, Ed Maste wrote:

> Thanks for the link Nikolay.
>=20
> Borja, I assume it's the PR submission form that gave you trouble -
> sorry for that.  Based on your report it sounds to me like the bug is
> in OpenBGPd itself.  If it works on OpenBSD with the TCP_MD5SIG option
> though I'd assume it's due to a difference in our (FreeBSD's)
> implementation of the option.  Did you look at the OpenBSD/FreeBSD
> differences in your investigation?

Both bird and quagga work as expected on FreeBSD. You can leave TCP_MD5 =
enabled in the kernel. If you specify "password" options for a BGP peer, =
it will enable TCP_MD5. Of course in FreeBSD it's a bit clumsy and you =
have to use setkey(8) to set the keys. But it works.




Borja.