From owner-freebsd-current@FreeBSD.ORG Mon Apr 3 09:55:59 2006 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E697816A41F for ; Mon, 3 Apr 2006 09:55:59 +0000 (UTC) (envelope-from nikruzhan@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.200]) by mx1.FreeBSD.org (Postfix) with ESMTP id 59E9143D53 for ; Mon, 3 Apr 2006 09:55:57 +0000 (GMT) (envelope-from nikruzhan@gmail.com) Received: by zproxy.gmail.com with SMTP id l8so1525492nzf for ; Mon, 03 Apr 2006 02:55:56 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=h+Wfy+IjUDNuNdZ9TGDNTxNOuQchbamoJSu0DT52jW5xTcZFe+7Y0iEVRiIASrAbZiBdYhQAWgmj4OFbehxro2KCF8JMCSS7n7hoRMEZnyVpSw1vggObKi6XbLX4lwn32BXqYEbP91rPAifP2SeCqB5vUkGiX6zCm/OMvSXwfe4= Received: by 10.35.96.11 with SMTP id y11mr1632088pyl; Mon, 03 Apr 2006 02:55:56 -0700 (PDT) Received: by 10.35.92.9 with HTTP; Mon, 3 Apr 2006 02:55:56 -0700 (PDT) Message-ID: <60ffc71f0604030255h3b418706vfaf51bb5f088dff3@mail.gmail.com> Date: Mon, 3 Apr 2006 17:55:56 +0800 From: Nik To: Thomas In-Reply-To: <1144055468.15377.12.camel@bert.mlan.solnet.ch> MIME-Version: 1.0 References: <60ffc71f0604030126w60070561i9781729205d3790d@mail.gmail.com> <1144055468.15377.12.camel@bert.mlan.solnet.ch> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: current@freebsd.org Subject: Re: BGP: can't set sockopt TCP_MD5SIG 0 to socket 16 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2006 09:56:00 -0000 I'm curious why I need to enable MD5 because in my system I don't use any authentication method. Is there any way to off the parameter. Also I notice that vlan in FreeBSD is not fully trunk. Examples ; vlan 1000 : 192.168.0.1/26 connect to L2 switch and untag certain port to connect to PC. I still can use internet when I set that PC to use this IP; IP =3D 192.168.0.5/24 Gateway =3D 192.168.0.1/24 Is there any options that I need to put in kernel to prevent thing like thi= s happen. On 4/3/06, Thomas wrote: > > Am Montag, den 03.04.2006, 16:26 +0800 schrieb Nik: > > Hi all, > > > > I got four FreeBSD router and two of them using FreeBSD 6.1 Prerelease > and > > quagga 0.99.3 and the other two is using FreeBSD 5.4 with quagga 0.98.5= . > I > > try to implement IBGP session in this 4 router and I encounter this > problem > > when activate the IBGP; > > > > Info: > > 1) Two router is a Core - each has different version of OS and Quagga > > 2) Two router is a Distribution -each has different version of OS and > Quagga > > > > BGP: can't set sockopt TCP_MD5SIG 0 to socket 16 > > BGP: can't set sockopt TCP_MD5SIG 0 to socket 15 > > BGP: can't set sockopt TCP_MD5SIG 0 to socket 18 > > > > FYI, I've already compile quagga with MD5 patch for BGP. Thanks a lot. > > Use this kernel options: > # quagga needs this for MD5 passwords on BGP sessions > options TCP_SIGNATURE > options FAST_IPSEC > device crypto > device cryptodev > > Regards, > Thomas > > PS: This is a question for freebsd-net@ rather than current@ > > > _______________________________________________ > > freebsd-current@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-current > > To unsubscribe, send any mail to " > freebsd-current-unsubscribe@freebsd.org" > >