Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Nov 2017 10:26:48 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 223835] BGP session not established with md5 password via FRRouting
Message-ID:  <bug-223835-8-lXGhkIwtLS@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-223835-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-223835-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223835

--- Comment #3 from Andrey V. Elsukov <ae@FreeBSD.org> ---
(In reply to Alexey from comment #2)
> flush;
> add  185.1.62.241 185.1.62.69 tcp 0x1000 -A tcp-md5 "some_password";
> add 185.1.62.69 185.1.62.241 tcp 0x1001 -A tcp-md5 "some_password";
> 
> I also do this /etc/rc.d/ipsec reload
> 
> [root@gate /home/pautina]# setkey -D
> 185.1.62.69 185.1.62.241
>         tcp mode=any spi=4097(0x00001001) reqid=0(0x00000000)
>         A: tcp-md5  6a757472 616e3764 45625577 72366339
>         allocated: 0    hard: 0 soft: 0
>         sadb_seq=1 pid=55761 refcnt=1
> 185.1.62.241 185.1.62.69
>         tcp mode=any spi=4096(0x00001000) reqid=0(0x00000000)
>         A: tcp-md5  6a757472 616e3764 45625577 72366339
>         allocated: 0    hard: 0 soft: 0
>         sadb_seq=0 pid=55761 refcnt=1
> But BGP session state at Connect.

It seems SAs are not matched by any packets.
Check what addresses uses daemon and also check what shows `netstat -sp tcp |
grep sig`

-- 
You are receiving this mail because:
You are the assignee for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-223835-8-lXGhkIwtLS>