[Xorp-users] update ospf database after policy change
Pavlin Radoslavov
pavlin at icir.org
Thu Jun 28 19:27:14 PDT 2007
Mykola,
In the process of testing your setup we found some other bugs,
but now all of them are fixed in CVS.
Hence, please try the latest code and let us know if you still have
the issue.
Thanks,
Pavlin
Atanu Ghosh <atanu at icsi.berkeley.edu> wrote:
> Hi,
>
> XORP supports policy reconfigurations without the need to restart.
>
> You seem to have found a bug in the updating of the policies, if you
> "commit" after:
> levsha at workstation.levsha.org.ua# delete policy policy-statement to-ospf term other
>
> then the policies are correctly updated.
>
> XORP# run show ospf4 database | match 192.168.15[56]
> ASExt-2 *192.168.156.0 192.168.0.50 0x80000001 11 0x2 0x3df3
> 36
>
> Atanu.
>
> >>>>> "Mykola" == Mykola Dzham <i at levsha.org.ua> writes:
> Mykola> When i change ospf export policy to "network, that rejected previously,
> Mykola> now allow", then changes affect to ospf database immediately. But whe
> Mykola> in change policy to "network, that accepted previously, now reject",
> Mykola> then changes not affect to ospf database. Is it bug? Is it possible to
> Mykola> apply changes without restarting xorp?
>
> Mykola> xorp-1.4 , FreeBSD 6.2-RELEASE
>
> Mykola> Here is a test:
>
> Mykola> Start state:
>
> Mykola> levsha at workstation.levsha.org.ua# run show route table ipv4 unicast final | match 192.168.15[56]
> Mykola> 192.168.155.0/24 [connected(0)/0]
> Mykola> 192.168.156.0/24 [connected(0)/0]
> Mykola> levsha at workstation.levsha.org.ua# run show ospf4 database | match 192.168.15[56]
> Mykola> ASExt-2 *192.168.156.0 192.168.0.50 0x80000001 69 0x2 0x3df3 36
> Mykola> levsha at workstation.levsha.org.ua# show protocols ospf4 export
> Mykola> export: "to-ospf"
>
> Mykola> [edit]
> Mykola> levsha at workstation.levsha.org.ua# show policy policy-statement to-ospf
> Mykola> term testnet {
> Mykola> from {
> Mykola> protocol: "connected"
> Mykola> network4: 192.168.155.0/24
> Mykola> }
> Mykola> then {
> Mykola> reject {
> Mykola> }
> Mykola> }
> Mykola> }
> Mykola> term other {
> Mykola> from {
> Mykola> protocol: "connected"
> Mykola> }
> Mykola> then {
> Mykola> accept {
> Mykola> }
> Mykola> }
> Mykola> }
>
> Mykola> [edit]
>
> Mykola> change "network, that rejected previously,now allow":
>
> Mykola> levsha at workstation.levsha.org.ua# delete policy policy-statement to-ospf term testnet
> Mykola> Deleting:
> Mykola> testnet {
> Mykola> from {
> Mykola> protocol: "connected"
> Mykola> network4: 192.168.155.0/24
> Mykola> }
> Mykola> then {
> Mykola> reject {
> Mykola> }
> Mykola> }
> Mykola> }
>
> Mykola> OK
> Mykola> [edit]
> Mykola> levsha at workstation.levsha.org.ua# commit
> Mykola> OK
> Mykola> [edit]
> Mykola> levsha at workstation.levsha.org.ua# run show ospf4 database | match 192.168.15[56]
> Mykola> ASExt-2 *192.168.155.0 192.168.0.50 0x80000001 30 0x2 0x48e9 36
> Mykola> ASExt-2 *192.168.156.0 192.168.0.50 0x80000001 30 0x2 0x3df3 36
>
> Mykola> change "network, that accepted previously, now reject":
>
> Mykola> levsha at workstation.levsha.org.ua# delete policy policy-statement to-ospf term other
> Mykola> Deleting:
> Mykola> other {
> Mykola> from {
> Mykola> protocol: "connected"
> Mykola> }
> Mykola> then {
> Mykola> accept {
> Mykola> }
> Mykola> }
> Mykola> }
>
> Mykola> OK
> Mykola> [edit]
> Mykola> levsha at workstation.levsha.org.ua# set policy policy-statement to-ospf term rej {
> >> from protocol connected
> >> from network4 192.168.155.0/24
> >> then reject
> >> }
> Mykola> [edit]
> Mykola> evsha at workstation.levsha.org.ua# set policy policy-statement to-ospf term acc {
> >> from protocol connected
> >> then accept
> >> }
> Mykola> [edit]
> Mykola> levsha at workstation.levsha.org.ua# commit
> Mykola> OK
> Mykola> [edit]
> Mykola> levsha at workstation.levsha.org.ua# run show ospf4 database | match 192.168.15[56]
> Mykola> ASExt-2 *192.168.155.0 192.168.0.50 0x80000001 1769 0x2 0x48e9 36
> Mykola> ASExt-2 *192.168.156.0 192.168.0.50 0x80000001 1769 0x2 0x3df3 36
>
> Mykola> --
> Mykola> Mykola Dzham, LEFT-(UANIC|RIPE)
> Mykola> JID: levsha at jabber.net.ua
>
> Mykola> _______________________________________________
> Mykola> Xorp-users mailing list
> Mykola> Xorp-users at xorp.org
> Mykola> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users
>
> _______________________________________________
> Xorp-users mailing list
> Xorp-users at xorp.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users
More information about the Xorp-users
mailing list