Observed BGP peering issues when Md5 was enabled
Bug #1470256 reported by
Sanju Abraham
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
R2.0 |
Fix Committed
|
High
|
Nischal Sheth | |||
R2.1 |
Fix Released
|
High
|
Nischal Sheth | |||
R2.20 |
Fix Released
|
High
|
Nischal Sheth | |||
Trunk |
Fix Committed
|
High
|
Nischal Sheth |
Bug Description
On a setup with 2.20 build 64, Ubuntu 14.04.1, I saw issue with BGP peering with Md5 enabled.
Here are set of issues:
1-> fab provisioned with Md5 and key enabled and it completed successfuly
2-> Gateway (MX) Md5 configuration was using key-chains.
3-> BGP peering info for one of the control node has local_identifier set to "0.0.0.0" though IFMAP has the local identifier populated correctly.
** Note for (2) above Nischal suggested the solution is to use authentication-key in the protocol bgp group configuration instead of the key-chain bgp-auth. Using key-chain bgp-auth does not work with the TCP options used on standard linux distros.
Changed in juniperopenstack: | |
assignee: | nobody → Nischal Sheth (nsheth) |
importance: | Undecided → High |
description: | updated |
no longer affects: | juniperopenstack/r2.30 |
tags: | added: contrail-control |
To post a comment you must log in.
Review in progress for https:/ /review. opencontrail. org/12118
Submitter: Nischal Sheth (<email address hidden>)