Date: Mon, 19 May 2008 19:30:06 GMT From: Basil Zaulychny <zaulychny@yahoo.com> To: freebsd-bugs@FreeBSD.org Subject: Re: kern/123200: Server failure due to netgraph mpd and dhcpclient Message-ID: <200805191930.m4JJU6ma058873@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/123200; it has been noted by GNATS. From: Basil Zaulychny <zaulychny@yahoo.com> To: bug-followup@FreeBSD.org, zaulychny@yahoo.com Cc: Subject: Re: kern/123200: Server failure due to netgraph mpd and dhcpclient Date: Mon, 19 May 2008 11:57:25 -0700 (PDT) --0-659038347-1211223445=:97365 Content-Type: text/plain; charset=us-ascii Hello guys, >At the very first look on your configuration, I've seen one misconfiguration >which might cause problems: You're using a netmask greater than /32 for alias >addresses on same subnet (take a look at I/F fxp0 addresses 192.168.0.101, >192.168.0.199 and 192.168.0.1 share the same subnet (/24) and all three have >a netmask of /24. Only one should have a /24, the others should be created >as /32. I have corrected configuration according to above mentioned notice and switch on the dump capabilites but all of this result in dead server crash without reboot and without dump (no files like vmcore.0 etc. no dump found server have said) after 2 days of uptime! :( I have reconfigured server back, so until now server may crash but with the following reboot. Next time I'll try WITNESS option enabled. >Also please explain a bit about your DHCP issue (to me it's unclear what role >dhcp_client may play here). Some people claim that similar failure on Freebsd 6.x is due to Netgraph DHCP (dhclient) interaction... (They suspect bug inside netgraph ) >Do you start mpd from the DHCP script of vice versa? No. mpd starts from rc.conf >Please show us your mpd configuration. Also a look to the routing table might >be useful. mpd.conf (mpd5) ==================== default: load vpn load pptp_server vpn: create bundle static B1 set bundle disable noretry set iface route default set iface enable tcpmssfix set iface idle 0 set iface enable nat set iface up-script /home/basil/inet.sh set ipcp ranges 0.0.0.0/0 0.0.0.0/0 create link static L1 pptp set link action bundle B1 set auth authname mylogin@my.isp.com set link max-redial 0 set link mtu 1416 set link keep-alive 20 75 set pptp peer 10.0.0.1 set pptp disable windowing open pptp_server: # Define dynamic IP address pool. set ippool add pool1 192.168.8.2 192.168.8.254 # Create clonable bundle template named B create bundle template B set iface enable proxy-arp set iface idle 0 set iface enable tcpmssfix set ipcp yes vjcomp # Specify IP address pool for dynamic assigment. set ipcp ranges 192.168.8.1/32 ippool pool1 set ipcp dns 192.168.2.1 # set ipcp nbns 192.168.1.4 # The five lines below enable Microsoft Point-to-Point encryption # (MPPE) using the ng_mppc(8) netgraph node type. set bundle enable compression set ccp yes mppc set mppc yes e40 set mppc yes e128 set mppc yes stateless # Create clonable link template named L create link template L pptp # Set bundle template to use set link action bundle B # Multilink adds some overhead, but gives full 1500 MTU. set link enable multilink set link yes acfcomp protocomp set link no pap chap set link enable chap # We can use use RADIUS authentication/accounting by including # another config section with label 'radius'. # load radius set link keep-alive 10 60 # We reducing link mtu to avoid GRE packet fragmentation. set link mtu 1416 # Configure PPTP set pptp self 10.113.0.200 # set pptp self 192.168.0.101 # Allow to accept calls set link enable incoming ==================== netstat -rn ---------------------------------------------- Internet: Destination Gateway Flags Refs Use Netif Expire default 85.223.129.9 UGS 0 38220149 ng0 10/16 link#1 UCS 0 0 rl0 10.0.0.1 00:1c:0f:5c:ee:40 UHLW 1 167711651 rl0 251 10.24.4/22 link#1 UC 0 0 rl0 10.24.7.78 00:1d:7d:a4:33:b4 UHLW 1 1 rl0 833 10.113/24 link#2 UC 0 0 fxp0 => 10.113/16 10.113.0.1 UGS 0 58324308 fxp0 10.113.0.1 00:07:e9:0a:6c:de UHLW 5 10 fxp0 1200 10.113.0.2 00:1d:60:36:96:0d UHLW 1 3 fxp0 10.113.0.6 00:02:44:5f:9c:00 UHLW 1 4 fxp0 1171 10.113.0.19 00:13:8f:db:10:43 UHLW 1 2 fxp0 10.113.0.35 00:19:db:7b:a3:99 UHLW 1 4 fxp0 10.113.0.36 00:02:44:86:00:c4 UHLW 1 6 fxp0 1093 10.113.0.41 00:0d:87:58:3e:ad UHLW 1 135 fxp0 1199 10.113.0.99 00:03:47:99:8e:a9 UHLW 1 103 fxp0 136 85.223.129.9 83.170.252.218 UH 1 0 ng0 127.0.0.1 127.0.0.1 UH 0 522765 lo0 192.168.0 link#2 UC 0 0 fxp0 192.168.0.1 00:02:b3:bc:32:2b UHLW 1 10569 lo0 192.168.0.3 00:13:77:02:ca:4b UHLW 1 89 fxp0 1174 192.168.0.10 00:04:61:45:e1:9e UHLW 1 1659931 fxp0 738 192.168.0.12 00:11:d8:9e:3c:69 UHLW 1 24059 fxp0 192.168.0.18 00:1d:60:2c:33:11 UHLW 1 1959 fxp0 181 192.168.0.20 00:13:d4:58:61:49 UHLW 1 2583 fxp0 539 192.168.0.26 00:00:21:2c:ee:e0 UHLW 1 17086 fxp0 814 192.168.0.27 00:02:44:40:e7:e0 UHLW 1 9 fxp0 821 192.168.0.30 00:02:44:74:83:12 UHLW 1 1114763 fxp0 1174 192.168.0.31 00:1e:8c:b5:e0:72 UHLW 1 1797609 fxp0 1094 192.168.0.47 00:1e:8c:14:55:7d UHLW 1 415 fxp0 807 192.168.0.56 00:0a:48:03:41:f8 UHLW 1 22371 fxp0 423 192.168.0.59 00:08:54:39:79:0b UHLW 1 29435 fxp0 1194 192.168.0.60 00:13:d3:6f:a5:97 UHLW 1 55 fxp0 1040 192.168.0.70 00:0c:76:ae:84:53 UHLW 1 9759 fxp0 924 192.168.0.77 00:13:8f:29:20:23 UHLW 1 188 fxp0 1073 192.168.0.99 00:03:47:99:8e:a9 UHLW 1 205 fxp0 256 192.168.0.101 00:02:b3:bc:32:2b UHLW 1 1 lo0 192.168.0.111 00:60:97:bc:a3:ad UHLW 1 55 fxp0 1200 192.168.0.201 00:16:d4:ae:af:03 UHLW 1 662 fxp0 985 192.168.0.255 ff:ff:ff:ff:ff:ff UHLWb 1 56772 fxp0 192.168.1 10.113.0.1 UGS 0 12222 fxp0 192.168.2 link#2 UC 0 0 fxp0 192.168.2.1 00:02:b3:bc:32:2b UHLW 1 10645 lo0 192.168.3 10.113.0.1 UGS 0 2412 fxp0 192.168.4 10.113.0.1 UGS 0 2387 fxp0 192.168.8.6 192.168.8.1 UH 0 134133 ng1 192.168.8.10 192.168.8.1 UH 0 3833 ng2 192.168.100 link#2 UC 0 0 fxp0 192.168.100.7 00:1b:fc:ca:01:38 UHLW 1 156128 fxp0 639 Best regards, Basil Zaulychny --0-659038347-1211223445=:97365 Content-Type: text/html; charset=us-ascii <html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"> Hello guys,<br><br>>At the very first look on your configuration, I've seen one misconfiguration <br> >which might cause problems: You're using a netmask greater than /32 for alias <br> >addresses on same subnet (take a look at I/F fxp0 addresses 192.168.0.101, <br> >192.168.0.199 and 192.168.0.1 share the same subnet (/24) and all three have <br> >a netmask of /24. Only one should have a /24, the others should be created <br> >as /32.<br><br>I have corrected configuration according to above mentioned notice and switch on the dump capabilites but all of this result in dead server crash without reboot and without dump (no files like vmcore.0 etc. no dump found server have said) after 2 days of uptime! :(<br> I have reconfigured server back, so until now server may crash but with the following reboot.<br><br>Next time I'll try WITNESS option enabled.<br><br>>Also please explain a bit about your DHCP issue (to me it's unclear what role <br> >dhcp_client may play here). <br>Some people claim that similar failure on Freebsd 6.x is due to Netgraph DHCP (dhclient) interaction... (They suspect bug inside netgraph )<br>>Do you start mpd from the DHCP script of vice versa? <br>No. mpd starts from rc.conf<br> >Please show us your mpd configuration. Also a look to the routing table might <br> >be useful. <br><div> mpd.conf (mpd5)<br>====================<br>default: <br> load vpn <br> load pptp_server<br><br>vpn: &nbs p; <br> create bundle static B1 <br> set bundle disable noretry <br> set iface route default <br> set iface enable tcpmssfix <br> set iface idle 0 &n bsp; <br> set iface enable nat <br> set iface up-script /home/basil/inet.sh <br> set ipcp ranges 0.0.0.0/0 0.0.0.0/0 <br> create link static L1 pptp <br> set link action bundle B1 &nb sp; <br> set auth authname mylogin@my.isp.com<br> set link max-redial 0 <br> set link mtu 1416 <br> set link keep-alive 20 75 <br> set pptp peer 10.0.0.1 &nb sp; <br> set pptp disable windowing <br> open <br><br>pptp_server: <br># Define dynamic IP address pool. &n bsp; <br> set ippool add pool1 192.168.8.2 192.168.8.254 <br> <br># Create clonable bundle template named B &nbs p; <br> create bundle template B <br> set iface enable proxy-arp <br> set iface idle 0 <br> set iface enable tcpmssfix <br> set ipcp yes vjcomp <br># Specify IP address pool for dynamic assigment. <br> set ipcp ranges 192.168.8.1/32 ippool pool1 <br> set ipcp dns 192.168.2.1 <br># set ipcp nbns 192.168.1.4 <br># The five lines below enable Microsoft Point-to-Point encryption <br># (MPPE) using the ng_mppc(8) netgraph node type. <br> set bundle enable compression &nbs p; <br> set ccp yes mppc <br> set mppc yes e40 &nbs p; <br> set mppc yes e128 <br> set mppc yes stateless <br> &nbs p; <br># Create clonable link template named L <br> create link template L pptp <br># Set bundle template to use <br> set link action bundle B <br># Multilink adds some overhead, but gives full 1500 MTU. <br> set link enable multilink <br> set link yes acfcomp protocomp <br> set link no pap chap& nbsp; <br> set link enable chap <br># We can use use RADIUS authentication/accounting by including <br># another config section with label 'radius'. <br>#   ; load radius <br> set link keep-alive 10 60 <br># We reducing link mtu to avoid GRE packet fragmentation. <br> set link mtu 1416 &nb sp; <br># Configure PPTP <br> set pptp self 10.113.0.200 <br># set pptp self 192.168.0.101 <br># Allow to accept calls <br> set link enable incoming <br>   ; <br>====================<br><br>netstat -rn<br>----------------------------------------------<br>Internet: <br>Destination &n bsp; Gateway Flags Refs Use Netif Expire <br>default 85.223.129.9 UGS 0 38220149 ng0 <br>10/16 link#1 UCS 0 0 rl0 <br>10.0.0.1 00:1c:0f:5c:ee:40 UHLW 1 167711651 rl0&nbs p; 251<br>10.24.4/22 link#1 UC 0 0 rl0 <br>10.24.7.78 00:1d:7d:a4:33:b4 UHLW 1 1 rl0 833 <br>10.113/24 link#2 UC 0 0 fxp0 => <br>10.113/16 10.113.0 .1 UGS 0 58324308 fxp0 <br>10.113.0.1 00:07:e9:0a:6c:de UHLW 5 10 fxp0 1200 <br>10.113.0.2 00:1d:60:36:96:0d UHLW 1 3 fxp0 <br>10.113.0.6 00:02:44:5f:9c:00 UHLW 1 4 fxp0 1171 <br>10.113.0.19 00:13:8f:db:10:43 UHLW &nbs p; 1 2 fxp0 <br>10.113.0.35 00:19:db:7b:a3:99 UHLW 1 4 fxp0 <br>10.113.0.36 00:02:44:86:00:c4 UHLW 1 6 fxp0 1093 <br>10.113.0.41 00:0d:87:58:3e:ad UHLW 1 135 fxp0 1199 <br>10.113.0.99 00:03:47:99:8e:a9 UHLW 1 103 fxp0&nb sp; 136 <br>85.223.129.9 83.170.252.218 UH 1 0 ng0 <br>127.0.0.1 127.0.0.1 UH 0 522765 lo0 <br>192.168.0 link#2 UC 0 0 fxp0 <br>192.168.0.1 0 0:02:b3:bc:32:2b UHLW 1 10569 lo0 <br>192.168.0.3 00:13:77:02:ca:4b UHLW 1 89 fxp0 1174 <br>192.168.0.10 00:04:61:45:e1:9e UHLW 1 1659931 fxp0 738 <br>192.168.0.12 00:11:d8:9e:3c:69 UHLW 1 24059 fxp0 <br>192.168.0.18 00:1d:60:2c:33:11 UHLW 1 1959 fxp0 181 <br>1 92.168.0.20 00:13:d4:58:61:49 UHLW 1 2583 fxp0 539 <br>192.168.0.26 00:00:21:2c:ee:e0 UHLW 1 17086 fxp0 814 <br>192.168.0.27 00:02:44:40:e7:e0 UHLW 1 9 fxp0 821 <br>192.168.0.30 00:02:44:74:83:12 UHLW 1 1114763 fxp0 1174 <br>192.168.0.31 00:1e:8c:b5:e0:72 UHLW 1 1797609 fxp0 1094 <br>192.168.0.47 &n bsp; 00:1e:8c:14:55:7d UHLW 1 415 fxp0 807 <br>192.168.0.56 00:0a:48:03:41:f8 UHLW 1 22371 fxp0 423 <br>192.168.0.59 00:08:54:39:79:0b UHLW 1 29435 fxp0 1194 <br>192.168.0.60 00:13:d3:6f:a5:97 UHLW 1 55 fxp0 1040 <br>192.168.0.70 00:0c:76:ae:84:53 UHLW 1 9759 fxp0 924 <br>192.16 8.0.77 00:13:8f:29:20:23 UHLW 1 188 fxp0 1073 <br>192.168.0.99 00:03:47:99:8e:a9 UHLW 1 205 fxp0 256 <br>192.168.0.101 00:02:b3:bc:32:2b UHLW 1 1 lo0 <br>192.168.0.111 00:60:97:bc:a3:ad UHLW 1 55 fxp0 1200 <br>192.168.0.201 00:16:d4:ae:af:03 UHLW 1 662  ; fxp0 985 <br>192.168.0.255 ff:ff:ff:ff:ff:ff UHLWb 1 56772 fxp0 <br>192.168.1 10.113.0.1 UGS 0 12222 fxp0 <br>192.168.2 link#2 UC 0 0 fxp0 <br>192.168.2.1 00:02:b3:bc:32:2b UHLW 1 10645 lo0 <br>192.168.3 10.113.0.1 UGS 0 2412 fxp0 <br>192.168.4 10.113.0.1 UGS 0 2387 fxp0 <br>192.168.8.6 192.168.8.1 UH 0 134133 ng1 <br>192.168.8.10 19 2.168.8.1 UH 0 3833 ng2 <br>192.168.100 link#2 UC 0 0 fxp0 <br>192.168.100.7 00:1b:fc:ca:01:38 UHLW 1 156128 fxp0 639 <br><br><br><br></div>Best regards,<br> Basil Zaulychny<div><br></div></div><br> </body></html> --0-659038347-1211223445=:97365--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200805191930.m4JJU6ma058873>