epa, achei gente reportando q mesmo com a conf citada, o problema persiste.
se baixar o mtu pra miseros 128 pode resolver mas vai prejudicar seu trafego. se prepara pra comprar outra placa!!! http://lists.freebsd.org/pipermail/freebsd-stable/2012-August/069262.html PS: agora vi q seu ip 10.100 é pro iBGP..... [ ]'s Fabricio Lima When your hammer is C++, everything begins to look like a thumb. Em 11 de dezembro de 2014 14:41, Fabricio Lima <lis...@fabriciolima.com.br> escreveu: > a solucao do seu problema está aqui: > http://www.blog.mbehrens.eu/it/linuxunix/freebsd/freebsd-9-0-bge0-watchdog > > hw.bge.allow_asf="0" > > to your /boot/loader.conf and reboot > > (mas responde meu outro email pq quero entender seu bgp pra estudar um > pouquinho mais...) > > [ ]'s > Fabricio Lima > When your hammer is C++, everything begins to look like a thumb. > > Em 11 de dezembro de 2014 14:39, Fabricio Lima <lis...@fabriciolima.com.br > > escreveu: > > Thiago, >> >> pelo o q o autocomplete do google trouxe, eu creio q tem muita gente >> reclamando de watchdog timeout e reset neste tipo de driver... >> tenta trocar a placa de rede!!!! >> >> Duvida: pq vc tem 'backbone' com bgp na interface com endereçamento >> 10.100.x.x? >> se seus provedores estao nas interfaces Peer1, peer2, e peer3 .. nao >> entendi 'pra onde vai' este cabo... >> >> entendi q vc tem duas lan internas (de radios), e 2 provedores (sendo um >> com 2 ips) >> acho q a placa 10.100.x.x dentro do bgp nao traz problema, mas nao acho >> necessaria declara-la. >> >> [ ]'s >> Fabricio Lima >> When your hammer is C++, everything begins to look like a thumb. >> >> Em 11 de dezembro de 2014 13:32, Thiago Andrighetti < >> thiagoapa...@yahoo.com.br> escreveu: >> >> Olá!Tenho um FreeBSD 10 com o openbgpd instalado e configurado.Eu tinha >>> um link tudo certinho, agora coloquei mais um link com uma segunda >>> operadora eo que está acontecendo é que a interface onde este link esta >>> conectada varias vezes ao dia fica DOWN e UP, e quandoacontece isso a RIB >>> fica com os prefixos bgp mas a FIB fica limpa, ou seja, link fora e cliente >>> querendo fazer foqueiracom meus ossos....Aí se eu subo novamente o link 1 >>> (eu estou deixando ele parado), o link 2 sobe novamente.Ou então se eu >>> restarto o daemon do opebbgpd, aí volta tambem, a FIB fica populada >>> novamente. >>> Bem, valeu qualquer ajuda. >>> >>> Desculpem antecipadamente pelo tamanho do e-mail. >>> >>> segue um trecho do messages de quando o problema acontece...Dec 11 >>> 12:41:13 portal1 kernel: bge0: link state changed to DOWN >>> Dec 11 12:41:13 portal1 kernel: vlan2: link state changed to DOWN >>> Dec 11 12:41:13 portal1 snmpd[2320]: send: Connection refused >>> Dec 11 12:41:16 portal1 kernel: bge0: link state changed to UP >>> Dec 11 12:41:16 portal1 kernel: vlan2: link state changed to UP >>> Dec 11 12:41:16 portal1 devd: Executing '/etc/rc.d/dhclient quietstart >>> bge0' >>> Dec 11 12:41:16 portal1 devd: Executing '/etc/rc.d/dhclient quietstart >>> vlan2' >>> >>> Detalhe, vi esse dhclient executando na interface vlan2 (que fica na >>> bge0), ambas são ip fixo /30. >>> Segue agora meu rc.conf#rc.conf >>> hostname="portal1" >>> >>> #vlans >>> cloned_interfaces="vlan0 vlan1 vlan2 lo1" >>> #vlan Peer1 Operadora 1 >>> ifconfig_vlan0="inet xxx.x.x.x netmask 255.255.255.252 vlan 329 vlandev >>> em0" >>> #vlan Peer2 Operadora 1 >>> ifconfig_vlan1="inet xxx.x.x.x netmask 255.255.255.252 vlan 654 vlandev >>> em0" >>> #vlan Peer Operadora 2 >>> ifconfig_vlan2="inet yyy.y.y.y netmask 255.255.255.248 vlan 946 vlandev >>> bge0" >>> #rota para radios op1 >>> ifconfig_em0="inet 192.168.1.254 netmask 255.255.255.0" >>> #lan para radios op2 >>> ifconfig_bge0="inet 10.1.1.254 netmask 255.255.255.0" >>> >>> #loopback para bgp >>> ifconfig_lo1="inet <IPDALOOPBACK> netmask 255.255.255.255" >>> #lan para backbone >>> ifconfig_em1="inet 10.100.1.1 netmask 255.255.255.252" >>> >>> #Servicos >>> sshd_enable="YES" >>> #ntpd_enable="YES" >>> openbgpd_enable="YES" >>> bsnmpd_enable="YES" >>> #snmpd_flags="-D ALL" >>> gateway_enable="YES" >>> firewall_enable="YES" >>> #firewall_script="/etc/ipfw.rules" >>> zabbix_agentd_enable="YES" >>> #ntop_enable="YES" >>> #ntop_flags="--ipv4 -d --use-syslog=daemon" >>> >>> # Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable >>> dumpdev="AUTO" >>> >>> Segue agora meu bgpd.conf#bgpd.conf >>> >>> # Definicoes Globais >>> AS $asn >>> router-id $router_id >>> listen on IP1 >>> listen on IP2 >>> listen on IP3 >>> listen on 10.100.1.1 >>> >>> fib-update yes >>> log updates >>> holdtime 60 >>> holdtime min 10 >>> >>> # Bloco IPv4 >>> network xxx.xxx.xxx.0/20 >>> network xxx.xxx.xxx.0/21 >>> network xxx.xxx.xxx.0/21 >>> network xxx.xxx.xxx.0/22 >>> network xxx.xxx.xxx.0/22 >>> network xxx.xxx.xxx.0/22 >>> network xxx.xxx.xxx.0/22 >>> >>> nexthop qualify via bgp >>> group "Operadora1'" { >>> remote-as $asnop1 >>> set localpref 100 >>> neighbor $peer_op1_1 { >>> local-address $local_op1_1 >>> descr "op11" >>> announce IPv4 unicast >>> announce self >>> } >>> neighbor $peer_op1_2 { >>> local-address $local_op1_2 >>> descr "op12" >>> announce IPv4 unicast >>> announce self >>> } >>> } >>> >>> group "Operadora2" { >>> remote-as $asnop2 >>> set localpref 101 >>> neighbor $peer_op2 { >>> local-address $local_op2 >>> descr "op2" >>> announce IPv4 unicast >>> announce self >>> } >>> } >>> >>> group "Backbone" { >>> remote-as $asn >>> announce default-route >>> neighbor 10.100.1.2 { >>> local-address 10.100.1.1 >>> announce IPv4 unicast >>> descr "BackboneInterno" >>> } >>> } >>> deny from any >>> allow from any inet prefixlen 8 - 24 >>> deny from any prefix 0.0.0.0/0 >>> deny from any prefix xxx.xxx.xxx.0/20 prefixlen >= 20 >>> >>> deny from any prefix 10.0.0.0/8 prefixlen >= 8 >>> deny from any prefix 172.16.0.0/12 prefixlen >= 12 >>> deny from any prefix 192.168.0.0/16 prefixlen >= 16 >>> deny from any prefix 169.254.0.0/16 prefixlen >= 16 >>> deny from any prefix 192.0.2.0/24 prefixlen >= 24 >>> deny from any prefix 224.0.0.0/4 prefixlen >= 4 >>> deny from any prefix 240.0.0.0/4 prefixlen >= 4 >>> >>> deny to any community asnop1:1 >>> deny to any community asnop1:2 >>> deny to any community asnop1:3 >>> deny to any community asnop1:4 >>> >>> # iBGP >>> match from group Backbone set localpref 900 >>> allow from group Backbone >>> >>> deny to group Operadora1 >>> allow to group Operadora1 prefix xxx.xxx.xxx.0/20 >>> >>> deny to group Operadora2 >>> allow to group Operadora2 prefix xxx.xxx.xxx.0/20 >>> >>> >>> >>> >>> >>> -- >>> Thiago Andrighetti de Pádua >>> ------------------------- >>> Histórico: http://www.fug.com.br/historico/html/freebsd/ >>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd >>> >> >> > ------------------------- Histórico: http://www.fug.com.br/historico/html/freebsd/ Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
