clucas's blog

• http://www.xfce.org
• ChangeLog
• Nouveautés en images
• Téléchargement

# cat /etc/bgpd.conf

# $OpenBSD: bgpd.conf,v 1.7 2004/10/01 15:12:16 henning Exp $
# sample bgpd configuration file
# see bgpd.conf(5)

#macros
peer1="2001:470:1F13:238::1"
## peer2="10.1.0.3"

# global configuration
AS 65001
router-id 10.0.0.149
# holdtime 180
# holdtime min 3
#listen on 127.0.0.1
#listen on ::1
# fib-update no
# route-collector no
# log updates
# network 10.0.1.0/24
network         2001:470:c936::/48

neighbor $peer1 {
        set nexthop self
        softreconfig in yes
        softreconfig out yes
        announce        IPv6 unicast 
        announce        IPv4 unicast 
        remote-as       65004
        local-address   2001:470:c936::1
#       descr           jdenoy
        multihop        2
}

# bgpctl show rib source-as  65004
flags: * = Valid, > = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete

flags destination         gateway          lpref   med aspath origin
      2001:470:1f12:238::/642001:470:1f13:238::1    100     0 65004 ?
      2001:470:1f13:238::/642001:470:1f13:238::1    100     0 65004 i

R# sh ip bgp regex ^65004$

# bgpctl show rib empty-as         
flags: * = Valid, > = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete

flags destination         gateway          lpref   med aspath origin
AI>   fc07::/16           ::                 100     0 i
AI>   172.16.0.0/24       0.0.0.0            100     0 i
AI>   2001:470:c936::/48  ::                 100     0 i
#

R# sh ip bgp regexp ^$

# uname -a
OpenBSD malloc.titux.org 4.1 GENERIC#1099 sparc64
# 

Feb 24 02:44:47 malloc bgpd[9556]: neighbor 2001:470:1f12:238::1: \ 
	session_setup_socket setsockopt hoplimit : Protocol not available

--- session.c~orig      Tue Feb 24 11:32:27 2009
+++ session.c   Tue Feb 24 08:41:19 2009
@@ -1142,7 +1142,7 @@
                }
        }
			 
-       if (p->conf.ebgp && p->conf.remote_addr.af == AF_INET6)
+       if (0 && p->conf.ebgp && p->conf.remote_addr.af == AF_INET6)
                 /* set hoplimit to foreign router's distance */
                 if (setsockopt(p->fd, IPPROTO_IPV6, IPV6_UNICAST_HOPS, &ttl,
                     sizeof(ttl)) == -1) {

neighbor X: state change Active -> OpenSent, reason: Connection opened
neighbor X: state change OpenSent -> OpenConfirm, reason: OPEN message received
neighbor X: state change OpenConfirm -> Established, reason: KEEPALIVE message received
neighbor X: state change Established -> Idle, reason: Connection closed
neighbor X: state change Idle -> Active, reason: Start
neighbor X: state change Active -> OpenSent, reason: Connection opened
neighbor X: state change OpenSent -> OpenConfirm, reason: OPEN message received
neighbor X: state change OpenConfirm -> Established, reason: KEEPALIVE message received

 * Added a -y option to ssh(1) to force logging to syslog rather than
   stderr, which is useful when running daemonised (ssh -f)

 * The sshd_config(5) ForceCommand directive now accepts commandline
   arguments for the internal-sftp server.

 * The ssh(1) ~C escape commandline now support runtime creation of
   dynamic (-D) port forwards.

 * Support the SOCKS4A protocol in ssh(1) dynamic (-D) forwards.
   (bz#1482)

 * Support remote port forwarding with a listen port of '0'. This
   informs the server that it should dynamically allocate a listen
   port and report it back to the client. (bz#1003)

 * sshd(8) now supports setting PermitEmptyPasswords and
   AllowAgentForwarding in Match blocks

• http://www.cisco.com/en/US/docs/ios/12_0t/12_0t1/feature/guide/l2tpT.html#wp18421
• http://www.informit.com/library/content.aspx?b=Troubleshooting_VPNs&seqNum=15

ppp mtu adaptative
...
radius-server ... non-standard
...
vpdn multihop
vpdn authen-before-forward

clucas@titux> perl -e 'print scalar localtime(1234567890),"\n";'
Sat Feb 14 00:31:30 2009
clucas@titux>