From shashikumar_249 at yahoo.co.in Thu Sep 2 04:12:17 2010 From: shashikumar_249 at yahoo.co.in (shashi kumar) Date: Thu, 2 Sep 2010 16:42:17 +0530 (IST) Subject: [Xorp-users] Reg:terminate called after throwing an instance of 'InvalidString' Message-ID: <796045.72745.qm@web137315.mail.in.yahoo.com> Hi All, When I am trying to run a new process , I am getting the following error. terminate called after throwing an instance of 'InvalidString' Aborted Can anyone help me in this regard. Thanks in Advance, shashi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100902/fd4476c0/attachment.html From shashikumar_249 at yahoo.co.in Thu Sep 2 04:23:03 2010 From: shashikumar_249 at yahoo.co.in (shashi kumar) Date: Thu, 2 Sep 2010 16:53:03 +0530 (IST) Subject: [Xorp-users] Fw: Reg:terminate called after throwing an instance of 'InvalidString' Message-ID: <669709.55938.qm@web137305.mail.in.yahoo.com> - Hi All, When I am trying to run a new process , I am getting the following error. terminate called after throwing an instance of 'InvalidString' Aborted Can anyone help me in this regard. Thanks in Advance, shashi THIS IS THE DEBUGGING INFORMATION warning: Missing the separate debug info file: /usr/lib/debug/.build-id/07/b722c2a7fed5b96cf4b40ce0f2a06eb0f8d2fc.debug terminate called after throwing an instance of 'InvalidString' [New Thread -1208703280 (LWP 20427)] Program received signal SIGABRT, Aborted. [Switching to Thread -1208703280 (LWP 20427)] 0x00110402 in __kernel_vsyscall () (gdb) bt #0? 0x00110402 in __kernel_vsyscall () #1? 0x00c208a0 in raise () from /lib/i686/nosegneg/libc.so.6 #2? 0x00c22271 in abort () from /lib/i686/nosegneg/libc.so.6 #3? 0x03962ba0 in __gnu_cxx::__verbose_terminate_handler () from /usr/lib/libstdc++.so.6 #4? 0x03960685 in ?? () from /usr/lib/libstdc++.so.6 #5? 0x039606c2 in std::terminate () from /usr/lib/libstdc++.so.6 #6? 0x039607fa in __cxa_throw () from /usr/lib/libstdc++.so.6 #7? 0x08a1bb18 in IPv6 (this=0x8f0c700, from_cstring=0x8d95bb4 "::") at ipv6.cc:87 #8? 0x08a1bbb3 in __static_initialization_and_destruction_0 (__initialize_p=1, __priority=65535) at ipv6.cc:511 #9? 0x08a1bcd3 in global constructors keyed to _ZN4IPv6C2EPKh () at ipv6.cc:524 #10 0x08a2f11b in __do_global_ctors_aux () #11 0x08063159 in _init () #12 0x08a2efe9 in __libc_csu_init () #13 0x00c0d331 in __libc_start_main () from /lib/i686/nosegneg/libc.so.6 #14 0x080645d1 in _start () -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100902/047c45f4/attachment.html From greearb at candelatech.com Thu Sep 2 08:20:16 2010 From: greearb at candelatech.com (Ben Greear) Date: Thu, 02 Sep 2010 08:20:16 -0700 Subject: [Xorp-users] Reg:terminate called after throwing an instance of 'InvalidString' In-Reply-To: <796045.72745.qm@web137315.mail.in.yahoo.com> References: <796045.72745.qm@web137315.mail.in.yahoo.com> Message-ID: <4C7FC0B0.6020909@candelatech.com> On 09/02/2010 04:12 AM, shashi kumar wrote: > Hi All, > > When I am trying to run a new process , I am getting the following error. What version of xorp, and what is your config file? What OS are you using? Thanks, Ben > > terminate called after throwing an instance of 'InvalidString' > Aborted > > Can anyone help me in this regard. > > Thanks in Advance, > shashi > > > > > _______________________________________________ > Xorp-users mailing list > Xorp-users at xorp.org > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users -- Ben Greear Candela Technologies Inc http://www.candelatech.com From stfactor at gmail.com Mon Sep 6 06:25:21 2010 From: stfactor at gmail.com (=?ISO-8859-1?Q?Bal=E1zs_Steierlein?=) Date: Mon, 6 Sep 2010 15:25:21 +0200 Subject: [Xorp-users] RIP problem Message-ID: Hi, I have read a thread about a problem which is exactly the same as mine but its solution did not help me. My problem is that I cannot ping the clients from each other. There is no firewall. I use Debain lenny on all the computers except the client3 where there is Kubuntu 10.04. I can see the response and request messages with wireshark but (and I think this is the problem) in the RIPv2 packets (which I capture with wireshark) there are 0.0.0.0 next-hop addresses for all the networks. If I check the routes (with the route -n command) on the Xorp routers it shows the correct routes: On Xorp1: Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.12.0 10.10.10.10 255.255.255.0 UG 2 0 0 eth0 192.168.11.0 10.10.10.10 255.255.255.0 UG 2 0 0 eth0 On Xorp2: Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.10.0 10.10.10.11 255.255.255.0 UG 2 0 0 eth0 This is the test network: Client1 eth0 ----eth0 Xorp1 eth1----eth0 Xorp2 eth1---- eth0 Client2 eth2 | | Client3 Client1 eth0 192.168.10.10 Xorp1 eth0 192.168.10.11 eth1 10.10.10.11 Xorp2 eth0 10.10.10.10 eth1 192.168.11.10 eth2 192.168.12.10 Client2 eth0 192.168.11.12 Client3 eth0 192.168.12.11 The Xorp2 rip config: policy { policy-statement connected-to-rip { term export { from { protocol: "connected" } then { metric: 0 } } } } protocols { rip { export "connected-to-rip" interface eth0 { vif eth0 { address 10.10.10.10 { disable: false } } } interface eth1 { vif eth1 { address 192.168.11.10 { disable: false } } } interface eth2 { vif eth2 { address 192.168.12.10 { disable: false } } } } } Xorp1 rip config: policy { policy-statement connected-to-rip { term export { from { protocol: "connected" } then { metric: 0 } } } } protocols { rip { export "connected-to-rip" interface eth0 { vif eth0 { address 192.168.10.11 { disable: false } } } interface eth1 { vif eth1 { address 10.10.10.11 { disable: false } } } } } Thank you for your reply! Best whishes: BaZsEE -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100906/eb515bd7/attachment.html From diego360xen at gmail.com Tue Sep 7 10:19:00 2010 From: diego360xen at gmail.com (=?ISO-8859-1?Q?Diego_Augusto_Pinzon_Carre=F1o?=) Date: Tue, 7 Sep 2010 12:19:00 -0500 Subject: [Xorp-users] Xorp-users Digest, Vol 53, Issue 28 In-Reply-To: References: Message-ID: 2010/8/31 > Send Xorp-users mailing list submissions to > xorp-users at xorp.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users > or, via email, send a message with subject or body 'help' to > xorp-users-request at xorp.org > > You can reach the person managing the list at > xorp-users-owner at xorp.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Xorp-users digest..." > > > Today's Topics: > > 1. hi Ben (Diego Augusto Pinzon Carre?o) > 2. Re: hi Ben (Ben Greear) > 3. Re: Problems with PIM-SSM (Daniel Camara) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 30 Aug 2010 14:13:50 -0500 > From: Diego Augusto Pinzon Carre?o > Subject: [Xorp-users] hi Ben > To: xorp-users at xorp.org > Message-ID: > > Content-Type: text/plain; charset="iso-8859-1" > > i just test your live -Cd base on ubuntu that come xorp pre-install , > on a virtualbox 3.2.4 seems a problem with find the interfaces. > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100830/8273960b/attachment-0001.html > > ------------------------------ > > Message: 2 > Date: Mon, 30 Aug 2010 12:17:43 -0700 > From: Ben Greear > Subject: Re: [Xorp-users] hi Ben > To: Diego Augusto Pinzon Carre?o > Cc: xorp-users at xorp.org > Message-ID: <4C7C03D7.6070101 at candelatech.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 08/30/2010 12:13 PM, Diego Augusto Pinzon Carre?o wrote: > > i just test your live -Cd base on ubuntu that come xorp pre-install , > > on a virtualbox 3.2.4 seems a problem with find the interfaces. > > Can you provide some more info, perhaps: > > ifconfig -aer > > lspci > > Thanks, > Ben > > > > > > > > > _______________________________________________ > > Xorp-users mailing list > > Xorp-users at xorp.org > > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users > > > Sorry Ben for my error.. i was interfacing my network with bridged adapter in wlan, there is a problem on virtualbox doing bridge in wireless interfaces. but if still help this information::i always got the same alert windows with this message. THE PANEL ENCOUNTERED A PROBLEM WHILE LOADING "OAFIID:GNOME_FastUserswitchApplet" -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100907/a1698bb8/attachment.html From greearb at candelatech.com Tue Sep 7 10:23:57 2010 From: greearb at candelatech.com (Ben Greear) Date: Tue, 07 Sep 2010 10:23:57 -0700 Subject: [Xorp-users] Xorp-users Digest, Vol 53, Issue 28 In-Reply-To: References: Message-ID: <4C86752D.4040800@candelatech.com> On 09/07/2010 10:19 AM, Diego Augusto Pinzon Carre?o wrote: > Sorry Ben for my error.. i was interfacing my network with bridged > adapter in wlan, there is a problem on virtualbox doing bridge in > wireless interfaces. > but if still help this information::i always got the same alert windows > with this message. THE PANEL ENCOUNTERED A PROBLEM WHILE LOADING > "OAFIID:GNOME_FastUserswitchApplet" That's just a problem with our live-cd..I removed one too many things, it seems. But, that shouldn't cause any real problem. Just close that window. Thanks, Ben > > > > > > _______________________________________________ > Xorp-users mailing list > Xorp-users at xorp.org > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users -- Ben Greear Candela Technologies Inc http://www.candelatech.com From jmitchell at ll.mit.edu Tue Sep 7 10:55:36 2010 From: jmitchell at ll.mit.edu (Jeff Mitchell) Date: Tue, 7 Sep 2010 13:55:36 -0400 Subject: [Xorp-users] help, about OSPF configuration In-Reply-To: <4BFEA891.7070704@candelatech.com> References: <474972474.19170@seu.edu.cn> <4BFEA891.7070704@candelatech.com> Message-ID: <4C867C98.2040801@ll.mit.edu> On 05/27/2010 01:14 PM, Ben Greear wrote: > On 05/27/2010 08:01 AM, wubaochuan wrote: >> hello everyone, >> When I configure OSPF, I have the following problems. >> >> All the following four machine run Fedora 12, and the first one and the >> fourth one run as hosts, the second and >> the third run as routers. > > I think you just need to add a policy to export connected routes > to OSPF. I'll post an example later today if you don't find something > sooner. I didn't see a reply to this and currently have the same trouble. I'd like to distribute my local (kernel) routes through OSPF. I managed to create an export policy that will distribute them one-hop ("blah" below) but I can't seem to get them distributed more than one hop away ("blah2" below was an attempt at that). In the following configs, this router is in the middle between two other routers; it correctly sees the locally-connected routes from both of the two end-routers, but the two end-routers do not see the routes to each others' locally connected routes. It's possible that I need a non-default import policy? But I'm really not sure. Any help appreciated! Thanks, Jeff ospf4 { router-id: 128.1.1.4 rfc1583-compatibility: false ip-router-alert: false area 0.0.0.0 { area-type: "normal" interface rtrs3 { link-type: "broadcast" vif rtrs3 { address 128.3.3.4 { priority: 128 hello-interval: 10 router-dead-interval: 40 interface-cost: 1 retransmit-interval: 5 transit-delay: 1 disable: false } } } interface rtrs1 { link-type: "broadcast" vif rtrs1 { address 128.1.1.4 { priority: 128 hello-interval: 10 router-dead-interval: 40 interface-cost: 1 retransmit-interval: 5 transit-delay: 1 disable: false } } } interface rtrs2 { link-type: "broadcast" vif rtrs2 { address 128.2.2.4 { priority: 128 hello-interval: 10 router-dead-interval: 40 interface-cost: 1 retransmit-interval: 5 transit-delay: 1 disable: false } } } } export: "blah" } policy { policy-statement blah { term blah { from { protocol: "connected" } to { network4: 128.0.0.0/8 } then { accept { } } } term blah2 { from { protocol: "ospf4" } to { network4: 128.0.0.0/8 } then { accept { } } } } } From jmitchell at ll.mit.edu Tue Sep 7 13:35:39 2010 From: jmitchell at ll.mit.edu (Jeff Mitchell) Date: Tue, 7 Sep 2010 16:35:39 -0400 Subject: [Xorp-users] help, about OSPF configuration In-Reply-To: <4C867C98.2040801@ll.mit.edu> References: <474972474.19170@seu.edu.cn> <4BFEA891.7070704@candelatech.com> <4C867C98.2040801@ll.mit.edu> Message-ID: <4C86A21B.8030404@ll.mit.edu> On 09/07/2010 01:55 PM, Jeff Mitchell wrote: > On 05/27/2010 01:14 PM, Ben Greear wrote: >> On 05/27/2010 08:01 AM, wubaochuan wrote: >>> hello everyone, >>> When I configure OSPF, I have the following problems. >>> >>> All the following four machine run Fedora 12, and the first one and the >>> fourth one run as hosts, the second and >>> the third run as routers. >> >> I think you just need to add a policy to export connected routes >> to OSPF. I'll post an example later today if you don't find something >> sooner. > > I didn't see a reply to this and currently have the same trouble. I'd > like to distribute my local (kernel) routes through OSPF. I managed to > create an export policy that will distribute them one-hop ("blah" below) > but I can't seem to get them distributed more than one hop away ("blah2" > below was an attempt at that). > > In the following configs, this router is in the middle between two other > routers; it correctly sees the locally-connected routes from both of the > two end-routers, but the two end-routers do not see the routes to each > others' locally connected routes. After restarting xorp on all boxes, this now seems to be working fine with only the first bit ("blah") below. Not sure why it didn't work the first time, but sorry for the noise. --Jeff > policy { > policy-statement blah { > term blah { > from { > protocol: "connected" > } > to { > network4: 128.0.0.0/8 > } > then { > accept { > } > } > } > } > } From wubaochuan at seu.edu.cn Wed Sep 8 18:26:59 2010 From: wubaochuan at seu.edu.cn (wubaochuan) Date: Thu, 09 Sep 2010 09:26:59 +0800 Subject: [Xorp-users] help, about OSPF configuration In-Reply-To: <483972438.22227@seu.edu.cn> References: <483972438.22227@seu.edu.cn> Message-ID: <483995773.24545@seu.edu.cn> Hello Jeff Mitchell, I am sorry for not reply. After sending the mail tiled "help, about OSPF configuration", we redesigned our topology, bought interface card, installed fedora12, so we did not solve the problem yet. But today, we face the problem again. We are trying to figure it out. Yours Baochuan xorp-users-request at xorp.org wrote: > Send Xorp-users mailing list submissions to > xorp-users at xorp.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users > or, via email, send a message with subject or body 'help' to > xorp-users-request at xorp.org > > You can reach the person managing the list at > xorp-users-owner at xorp.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Xorp-users digest..." > > > Today's Topics: > > 1. Re: help, about OSPF configuration (Jeff Mitchell) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 7 Sep 2010 16:35:39 -0400 > From: Jeff Mitchell > Subject: Re: [Xorp-users] help, about OSPF configuration > To: "xorp-users at xorp.org" > Message-ID: <4C86A21B.8030404 at ll.mit.edu> > Content-Type: text/plain; charset="ISO-8859-1"; format=flowed > > On 09/07/2010 01:55 PM, Jeff Mitchell wrote: > >> On 05/27/2010 01:14 PM, Ben Greear wrote: >> >>> On 05/27/2010 08:01 AM, wubaochuan wrote: >>> >>>> hello everyone, >>>> When I configure OSPF, I have the following problems. >>>> >>>> All the following four machine run Fedora 12, and the first one and the >>>> fourth one run as hosts, the second and >>>> the third run as routers. >>>> >>> I think you just need to add a policy to export connected routes >>> to OSPF. I'll post an example later today if you don't find something >>> sooner. >>> >> I didn't see a reply to this and currently have the same trouble. I'd >> like to distribute my local (kernel) routes through OSPF. I managed to >> create an export policy that will distribute them one-hop ("blah" below) >> but I can't seem to get them distributed more than one hop away ("blah2" >> below was an attempt at that). >> >> In the following configs, this router is in the middle between two other >> routers; it correctly sees the locally-connected routes from both of the >> two end-routers, but the two end-routers do not see the routes to each >> others' locally connected routes. >> > > After restarting xorp on all boxes, this now seems to be working fine > with only the first bit ("blah") below. Not sure why it didn't work the > first time, but sorry for the noise. > > --Jeff > > >> policy { >> policy-statement blah { >> term blah { >> from { >> protocol: "connected" >> } >> to { >> network4: 128.0.0.0/8 >> } >> then { >> accept { >> } >> } >> } >> } >> } >> > > > > ------------------------------ > > _______________________________________________ > Xorp-users mailing list > Xorp-users at xorp.org > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users > > > End of Xorp-users Digest, Vol 54, Issue 4 > ***************************************** > > From jmitchell at ll.mit.edu Thu Sep 9 06:45:55 2010 From: jmitchell at ll.mit.edu (Jeff Mitchell) Date: Thu, 9 Sep 2010 09:45:55 -0400 Subject: [Xorp-users] help, about OSPF configuration In-Reply-To: <4C8837E3.707@seu.edu.cn> References: <483972438.22227@seu.edu.cn> <4C8837E3.707@seu.edu.cn> Message-ID: <4C88E513.4040708@ll.mit.edu> On 09/08/2010 09:26 PM, wubaochuan wrote: > Hello Jeff Mitchell, > I am sorry for not reply. After sending the mail tiled "help, about OSPF configuration", we redesigned our topology, bought interface card, installed fedora12, > so we did not solve the problem yet. But today, we face the problem again. We are trying to figure it out. The policy below worked for me, in conjunction with this ospf4 configuration: ospf4 { router-id: 128.1.1.3 rfc1583-compatibility: false ip-router-alert: false area 0.0.0.0 { area-type: "normal" interface rtrs1 { link-type: "broadcast" vif rtrs1 { address 128.1.1.3 { priority: 128 hello-interval: 10 router-dead-interval: 40 interface-cost: 1 retransmit-interval: 5 transit-delay: 1 disable: false } } } } export: "blah" } >>> policy { >>> policy-statement blah { >>> term blah { >>> from { >>> protocol: "connected" >>> } >>> to { >>> network4: 128.0.0.0/8 >>> } >>> then { >>> accept { >>> } >>> } >>> } >>> } >>> } >>> From rps at maine.edu Thu Sep 9 08:12:50 2010 From: rps at maine.edu (Ray Soucy) Date: Thu, 9 Sep 2010 11:12:50 -0400 Subject: [Xorp-users] help, about OSPF configuration In-Reply-To: <4C86A21B.8030404@ll.mit.edu> References: <474972474.19170@seu.edu.cn> <4BFEA891.7070704@candelatech.com> <4C867C98.2040801@ll.mit.edu> <4C86A21B.8030404@ll.mit.edu> Message-ID: One thing to watch out for when just advertising all "connected" routes is that you don't inadvertently advertise networks that you don't want to (e.g. RFC 1918, Loopback, Default, etc.) So you could do something like: protocols { ospf4 { /* Snip. */ export: "OSPF_Export" } } policy { policy-statement "OSPF_Export" { term 100 { from { protocol: "connected" network4-list: "Loopback" } then { reject { } } } term 101 { from { protocol: "connected" network4-list: "RFC_1918" } then { reject { } } } term 102 { from { protocol: "connected" network4-list: "Default_Route" } then { reject { } } } term 103 { from { protocol: "connected" } then { accept { } } } then { reject { } } } network4-list "Loopback" { network 127.0.0.0/8 { modifier: "orlonger" } } network4-list "RFC_1918" { network 10.0.0.0/8 { modifier: "orlonger" } network 172.16.0.0/12 { modifier: "orlonger" } network 192.168.0.0/16 { modifier: "orlonger" } } network4-list "Default_Route" { network 0.0.0.0/0 } } But a cleaner way might be to make a network4-list of the prefixes you _do_ want advertised, and only export connected routes that match that list. Really depends on your operational model. The policy code is a bit buggy in 1.6, so be careful... you'll want to run some packet captures and make sure that what you tell XORP to do is actually being done. I haven't tested it much in the CT branch yet, but it's on my to-do list. On Tue, Sep 7, 2010 at 4:35 PM, Jeff Mitchell wrote: > On 09/07/2010 01:55 PM, Jeff Mitchell wrote: >> On 05/27/2010 01:14 PM, Ben Greear wrote: >>> On 05/27/2010 08:01 AM, wubaochuan wrote: >>>> hello everyone, >>>> When I configure OSPF, I have the following problems. >>>> >>>> All the following four machine run Fedora 12, and the first one and the >>>> fourth one run as hosts, the second and >>>> the third run as routers. >>> >>> I think you just need to add a policy to export connected routes >>> to OSPF. ?I'll post an example later today if you don't find something >>> sooner. >> >> I didn't see a reply to this and currently have the same trouble. I'd >> like to distribute my local (kernel) routes through OSPF. I managed to >> create an export policy that will distribute them one-hop ("blah" below) >> but I can't seem to get them distributed more than one hop away ("blah2" >> below was an attempt at that). >> >> In the following configs, this router is in the middle between two other >> routers; it correctly sees the locally-connected routes from both of the >> two end-routers, but the two end-routers do not see the routes to each >> others' locally connected routes. > > After restarting xorp on all boxes, this now seems to be working fine > with only the first bit ("blah") below. Not sure why it didn't work the > first time, but sorry for the noise. > > --Jeff > >> policy { >> ? ? ? policy-statement blah { >> ? ? ? ? ? term blah { >> ? ? ? ? ? ? ? from { >> ? ? ? ? ? ? ? ? ? protocol: "connected" >> ? ? ? ? ? ? ? } >> ? ? ? ? ? ? ? to { >> ? ? ? ? ? ? ? ? ? network4: 128.0.0.0/8 >> ? ? ? ? ? ? ? } >> ? ? ? ? ? ? ? then { >> ? ? ? ? ? ? ? ? ? accept { >> ? ? ? ? ? ? ? ? ? } >> ? ? ? ? ? ? ? } >> ? ? ? ? ? } >> ? ? ? } >> } > > _______________________________________________ > Xorp-users mailing list > Xorp-users at xorp.org > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users > -- Ray Soucy Epic Communications Specialist Phone: +1 (207) 561-3526 Networkmaine, a Unit of the University of Maine System http://www.networkmaine.net/ From a.greenhalgh at cs.ucl.ac.uk Sat Sep 11 09:11:47 2010 From: a.greenhalgh at cs.ucl.ac.uk (Adam Greenhalgh) Date: Sat, 11 Sep 2010 17:11:47 +0100 Subject: [Xorp-users] SNMP & xorp 1.8.2-CT In-Reply-To: <4C72A423.4070107@candelatech.com> References: <00db01cb3fca$ab8c3f70$02a4be50$@ascr.doe.gov> <4C6D763A.9010608@candelatech.com> <00e501cb3fd3$c5835900$508a0b00$@ascr.doe.gov> <4C6D8519.3090101@candelatech.com> <010601cb4055$cc491310$64db3930$@ascr.doe.gov> <4C6ED3A9.5090100@candelatech.com> <000001cb409c$f57eb9f0$e07c2dd0$@ascr.doe.gov> <4C6EDB43.3030401@candelatech.com> <20100822092350.155172itnt9v8vks@mail.ascr.doe.gov> <4C72A423.4070107@candelatech.com> Message-ID: On 23 August 2010 17:38, Ben Greear wrote: > On 08/22/2010 06:23 AM, Mike Weaver wrote: > > I'm much more versed in Linux than BSD anyway, just curious. We're a > > research organization and trying to scale back both our network > > infrastructure as well as the use of commercial/proprietary products. > > We're currently running a Cisco 7206 VXR router, multiple IDS systems > > (commercial & research) and Websense for content monitoring/blocking. > > > > Our lead read about Vyatta providing similar/better performance than > > Cisco without the hardware & maintenance costs, while also providing > > firewall (iptables) and content filtering (squidGuard) support. > > Unfortunately, Quagga doesn't support multicast and I don't have time to > > see if I make it work with things like pimd. > > > > Anyway, xorp looked like a good choice to evaluate and we're generally > > pretty impressed. When we discuss my evaluation results, we may end up > > deciding to go with another box or 2 behind the router to handle > > firewalling & content filtering. It would have been nice to get it all > > in one box from a complexity & cost standpoint (we're a small > > organization w/ limited resources). > > Even if xorp can't do the firewalling you want (and maybe it can > with the patch I posted a few days ago), you could run third-party > firewall scripts, or write your own iptables > scripts and have that run beside xorp. I don't think either would > interfere with the other as long as your firewall rules let > appropriate router traffic flow properly. > > If you had some development cycles to spare and need very good performance, my suggestion would be to resurrect the click modular router and xorp interaction and then hack in the firewall that way. If you tune your system correctly then out pacing most commerical offerings should be feasible. But its all about how you integrate click and xorp. Adam -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100911/eeaf075e/attachment.html From simon.vanderlinden at uclouvain.be Tue Sep 14 09:39:17 2010 From: simon.vanderlinden at uclouvain.be (Simon van der Linden) Date: Tue, 14 Sep 2010 18:39:17 +0200 Subject: [Xorp-users] BGP packing not performed while dumping route table Message-ID: <1284482357.6327.61.camel@adam> Hi, I noticed that when a BGP peering comes up, the route table is dumped to the new peer, but no packing is performed, that is, two prefixes with the same set of attributes are sent in two separate UPDATEs instead of only one. >From what I read in bgp/route_table_ribout.cc, packing is possible. Does anyone has a possible explanation about this behavior? Otherwise, I'll dig into it someday. Thanks in advance. Regards, Simon From zec at icir.org Wed Sep 15 08:54:04 2010 From: zec at icir.org (Marko Zec) Date: Wed, 15 Sep 2010 17:54:04 +0200 Subject: [Xorp-users] BGP packing not performed while dumping route table In-Reply-To: <1284482357.6327.61.camel@adam> References: <1284482357.6327.61.camel@adam> Message-ID: <201009151754.05096.zec@icir.org> On Tuesday 14 September 2010 18:39:17 Simon van der Linden wrote: > Hi, > > I noticed that when a BGP peering comes up, the route table is dumped to > the new peer, but no packing is performed, that is, two prefixes with > the same set of attributes are sent in two separate UPDATEs instead of > only one. > > >From what I read in bgp/route_table_ribout.cc, packing is possible. Does > > anyone has a possible explanation about this behavior? Otherwise, I'll > dig into it someday. As far as I can recall it, when a BGP peering comes up, a dedicated stage called dumptable is injected at the beginning of the outbound path of the new peering pipeline. ?The sole purpose of this stage is to scan through all the existing winning routes and push them one by one further down the pipeline, where each prefix might or might not get axed, or have its path attributes modified, by a filtering / policy stage, before it would eventually reach the ribout stage, which then packs it into a BGP update message. The fundamental problem is that dumptables scan over the entire IPv4 / IPv6 address space when emitting updates downstream, instead of using path attributes as the first-level iteration key. ?That said, even if a sequence of prefixes with identical path attributes would make it to the ribout stage, that would happen out of pure luck, i.e. with real-world BGP feeds that would be a rather unlikely event. ?So extending bgp/route_table_ribout.cc to coalesce multiple prefixes with identical path attributes into a single BGP update message is unlikely to make a significant impact, without first rearchitecting the way in which dumptables emit prefixes, which might be a much more difficult problem to solve. Hope this helps, Marko From simon.vanderlinden at uclouvain.be Wed Sep 15 09:20:51 2010 From: simon.vanderlinden at uclouvain.be (Simon van der Linden) Date: Wed, 15 Sep 2010 18:20:51 +0200 Subject: [Xorp-users] BGP packing not performed while dumping route table In-Reply-To: <201009151750.05142.zec@fer.hr> References: <1284482357.6327.61.camel@adam> <201009151750.05142.zec@fer.hr> Message-ID: <1284567651.6327.77.camel@adam> On mer, 2010-09-15 at 17:50 +0200, Marko Zec wrote: > On Tuesday 14 September 2010 18:39:17 Simon van der Linden wrote: > > I noticed that when a BGP peering comes up, the route table is dumped to > > the new peer, but no packing is performed, that is, two prefixes with > > the same set of attributes are sent in two separate UPDATEs instead of > > only one. > > > > >From what I read in bgp/route_table_ribout.cc, packing is possible. Does > > anyone has a possible explanation about this behavior? Otherwise, I'll > > dig into it someday. > > As far as I can recall it, when a BGP peering comes up, a dedicated stage > called dumptable is injected at the beginning of the outbound path of the new > peering pipeline. The sole purpose of this stage is to scan through all the > existing winning routes and push them one by one further down the pipeline, > where each prefix might or might not get axed, or have its path attributes > modified, by a filtering / policy stage, before it would eventually reach the > ribout stage, which then packs it into a BGP update message. Right. From what I have understood so far, it seems the dumptable calls add_route downstream for each route, which gets immediately pushed to the peer_handler, instead of being queued, and later pushed, so as to make packing possible in the ribout. > The fundamental problem is that dumptables scan over the entire IPv4 / IPv6 > address space when emitting updates downstream, instead of using path > attributes as the first-level iteration key. That said, even if a sequence > of prefixes with identical path attributes would make it to the ribout stage, > that would happen out of pure luck, i.e. with real-world BGP feeds that would > be a rather unlikely event. So extending bgp/route_table_ribout.cc to > coalesce multiple prefixes with identical path attributes into a single BGP > update message is unlikely to make a significant impact, without first > rearchitecting the way in which dumptables emit prefixes, which might be a > much more difficult problem to solve. I'd like to measure the impact of packing in various situations (notably for routing table transfers when a peering comes up) on some chosen set of routes. In some data I retrieved from routeviews, there are a bit less than 4 prefixes with the same set of attributes, on average. Thanks, Simon From rps at maine.edu Mon Sep 20 13:10:40 2010 From: rps at maine.edu (Ray Soucy) Date: Mon, 20 Sep 2010 16:10:40 -0400 Subject: [Xorp-users] Redistribute Static Routes from Kernel Message-ID: Was looking at what it would take to redistribute static routes. Is there anything like this in XORP-CT? http://mailman.icsi.berkeley.edu/pipermail/xorp-users/2006-April/001188.html -- Ray Soucy Epic Communications Specialist Phone: +1 (207) 561-3526 Networkmaine, a Unit of the University of Maine System http://www.networkmaine.net/ From greearb at candelatech.com Mon Sep 20 13:50:57 2010 From: greearb at candelatech.com (Ben Greear) Date: Mon, 20 Sep 2010 13:50:57 -0700 Subject: [Xorp-users] Redistribute Static Routes from Kernel In-Reply-To: References: Message-ID: <4C97C931.6060209@candelatech.com> On 09/20/2010 01:10 PM, Ray Soucy wrote: > Was looking at what it would take to redistribute static routes. Is > there anything like this in XORP-CT? > > http://mailman.icsi.berkeley.edu/pipermail/xorp-users/2006-April/001188.html > I did add a modified version of that patch to xorp.ct, so I believe it should work fine for you if you properly configure the policy. It may not work with all protocols (I think it just did OSPF), but that could be fixed easily enough I imagine. Thanks, Ben -- Ben Greear Candela Technologies Inc http://www.candelatech.com From zjf2005911 at 126.com Tue Sep 21 01:42:26 2010 From: zjf2005911 at 126.com (=?gbk?B?1cW+sLe8?=) Date: Tue, 21 Sep 2010 16:42:26 +0800 (CST) Subject: [Xorp-users] how to make forwarding plane on different machine Message-ID: <7b68c3.6395.12b33754a19.Coremail.zjf2005911@126.com> Somebody knows how forwarding plane reside on different machine than XORP (as described in XORP FEA document). . Lets say that machine A running the FEA and FE(say click), and machine B is running the rtrmgr and all other modules (RIB, RIP, etc). I found someone say that XORP finder (running on B) can know that the FEA is running on A, http://mailman.icsi.berkeley.edu/pipermail/xorp-hackers/2005-August/000430.html Here is the configure from A: interfaces { interface eth1{ vif eth1{ address 10.0.0.1 { prefix-length: 24 } } } } fea { unicast-forwarding4 { disable: false } click { disable: false duplicate-routes-to-kernel: false kernel-click { disable: true install-on-startup: true kernel-click-modules: "/path/to/proclikefs.o:/path/to/click.o" mount-directory: "/click" kernel-click-config-generator-file: "/home/nodea/xorp-1.6/fea/xorp_fea_click_config_generator" } user-click { disable: false command-file: "/usr/local/bin/click" command-extra-arguments: "-R" command-execute-on-startup: true control-address: 127.0.0.1 control-socket-port: 13000 startup-config-file: "/dev/null" user-click-config-generator-file: "/home/nodea/xorp-1.6/fea/xorp_fea_click_config_generator" } } } this is B's: interfaces { interface eth4{ vif eth4{ address 10.0.0.2 { prefix-length: 24 } } } interface eth5{ vif eth5{ address 11.0.0.2 { prefix-length: 24 } } } interface eth6{ vif eth6{ address 12.0.0.2 { prefix-length: 24 } } } interface eth7{ vif eth7{ address 13.0.0.2 { prefix-length: 24 } } } } protocols { ospf4 { router-id: 10.0.0.2 area 0.0.0.0 { interface eth4 { vif eth4 { address 10.0.0.2 { } } } } } } I want B can communicate with A , but it was not working...someone tell me why ? and how can I make this happen? -- jfzhang -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100921/1503473f/attachment.html From zjf2005911 at 126.com Tue Sep 21 02:06:16 2010 From: zjf2005911 at 126.com (=?gbk?B?1cW+sLe8?=) Date: Tue, 21 Sep 2010 17:06:16 +0800 (CST) Subject: [Xorp-users] help, How to configure a distributed router Message-ID: <1df6f42.68e3.12b338b1ecc.Coremail.zjf2005911@126.com> Hi , everyone I am now doing a distributed router, the control module on a single machine, the forwarding plane on another machine, how to make the two modules communicate?I saw someone said, you can do: machine A is running the FEA, and machine B is running the rtrmgr and all other modules (RIB, RIP, etc). The XORP finder (running on B) knows that the FEA is running on A, so all XRLs destined to the FEA will be sent to A's IP address. This work?When I configured in machine A: interfaces { interface eth1{ vif eth1{ address 10.0.0.1 { prefix-length: 24 } } } } fea { unicast-forwarding4 { disable: false } click { disable: false duplicate-routes-to-kernel: false kernel-click { disable: true install-on-startup: true kernel-click-modules: "/path/to/proclikefs.o:/path/to/click.o" mount-directory: "/click" kernel-click-config-generator-file: "/home/nodea/xorp-1.6/fea/xorp_fea_click_config_generator" } user-click { disable: false command-file: "/usr/local/bin/click" command-extra-arguments: "-R" command-execute-on-startup: true control-address: 127.0.0.1 control-socket-port: 13000 startup-config-file: "/dev/null" user-click-config-generator-file: "/home/nodea/xorp-1.6/fea/xorp_fea_click_config_generator" } } } In machine B, this configuration? interfaces { interface eth4{ vif eth4{ address 10.0.0.2 { prefix-length: 24 } } } interface eth5{ vif eth5{ address 11.0.0.2 { prefix-length: 24 } } } interface eth6{ vif eth6{ address 12.0.0.2 { prefix-length: 24 } } } interface eth7{ vif eth7{ address 13.0.0.2 { prefix-length: 24 } } } } protocols { ospf4 { router-id: 10.0.0.2 area 0.0.0.0 { interface eth4 { vif eth4 { address 10.0.0.2 { } } } } } } This is not work.I used telnet login on the machine A click, and found that there is no interfaces information of B .How should I configure A and B to make this happen. thanks ! -- jfzhang -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100921/6530d87e/attachment.html From amarnath at copperheadsystems.com Tue Sep 21 02:06:24 2010 From: amarnath at copperheadsystems.com (amarnath at copperheadsystems.com) Date: Tue, 21 Sep 2010 03:06:24 -0600 Subject: [Xorp-users] Xorp SNMP Message-ID: <070363bdf4e05826aa9bd652f26ee297.squirrel@mail.copperheadsystems.com> Hi, I am using xorp-1.6 and trying to configure the protocols using SNMP.Can anyone share the information how to using SNMP in xorp. Thanks, Amarnath. From manohar at copperheadsystems.com Wed Sep 29 03:33:44 2010 From: manohar at copperheadsystems.com (manohar at copperheadsystems.com) Date: Wed, 29 Sep 2010 16:03:44 +0530 Subject: [Xorp-users] Unable to configure redistribution In-Reply-To: <9ccaf00bcda5acf83892b89204e7a4fa.squirrel@mail.copperheadsystems.com> References: <9ccaf00bcda5acf83892b89204e7a4fa.squirrel@mail.copperheadsystems.com> Message-ID: <70649bc2e1171a047e92979ce4ec0582.squirrel@mail.copperheadsystems.com> Hi all, could anybody please help me how to configure redistribution in xorp . I want to redistribute static routes in rip and ospfv2 & vice versa. Thanks, Manohar. From aleksandar.cvjetic at gmail.com Wed Sep 29 13:50:25 2010 From: aleksandar.cvjetic at gmail.com (Aleksandar Cvjetic) Date: Wed, 29 Sep 2010 22:50:25 +0200 Subject: [Xorp-users] Unable to configure redistribution In-Reply-To: <70649bc2e1171a047e92979ce4ec0582.squirrel@mail.copperheadsystems.com> References: <9ccaf00bcda5acf83892b89204e7a4fa.squirrel@mail.copperheadsystems.com> <70649bc2e1171a047e92979ce4ec0582.squirrel@mail.copperheadsystems.com> Message-ID: Hi, I don't know how is it possible to redistribute OSPF or RIP routes into static, but for the other way you basically first configure policy-map with a term "from protocol static" and than "accept", and then use this policy-map as export map in your OSPF: "protocols ospf export ". Probably you can also find sample configuration in the mailing-list archive. B.R. Alex On Wed, Sep 29, 2010 at 12:33 PM, wrote: > Hi all, > > > could anybody please help me how to configure redistribution in xorp . > I want to redistribute static routes in rip and ospfv2 & vice versa. > > > Thanks, > Manohar. > > > > > > > _______________________________________________ > Xorp-users mailing list > Xorp-users at xorp.org > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/xorp-users > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20100929/a74f9904/attachment.html