Gathering routes problem

[Marius Mueller]

Hey there,

I am new to exabgp and I am trying a few basic labs. But im struggling with the basics.

I am using ExaBGP : 3.4.13

I have a server behind a firewall with NAT and I am trying to get BGP routes from a router. As mentioned in the FAQ Natting should work and I configured my config file as mentioned.

The exabgp config file:
group test {
router-id 212.xxx.xxx.xxx; #Public NAT IP

neighbor 82.xxx.xxx.xx { #BGP Router
local-address 192.168.0.103; #real Server IP
local-as xxx;
peer-as xxx;
md5 xxx;
}
}


exabgp output:
Tue, 23 Feb 2016 13:34:43 | WARNING | 10087 | configuration | Loaded new configuration successfully
Tue, 23 Feb 2016 13:34:45 | WARNING | 10087 | network | attempting to accept connections, socket not ready

Tue, 23 Feb 2016 13:36:26 | INFO | 10087 | reactor | Performing shutdown
Tue, 23 Feb 2016 13:36:26 | INFO | 10087 | network | Peer 82.xxx.xxx.xxx ASN xxx connection to peer failed


router log:
%IP-TCP-3-BADAUTH : Invalid MD5 digest from 212.xxx.xxx.xxx:35946 to 82.xxx.xxx.xxx:179

The md5 digest is definetly correct.
where should i strat looking for the problem?


Best regards

[Thomas Mangin]

I am developing on OS X and have no Linux VM to test MD5 ATM so I can
not replicate.
ExaBGP may have a bug ATM when accepting connection with MD5 - but not
when connecting out.
You should check if the connection work without MD5. You can also try to
“” quote the password.

Thomas

> --
> You received this message because you are subscribed to the Google
> Groups "exabgp-users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to exabgp-users...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Marius Mueller]

Hello,
thanks for your fast reply.

I have tested every syntax mentioned in "https://github.com/Exa-Networks/exabgp/blob/master/qa/conf/md5.conf"
None of them worked for me.

As workaround I deconfigured the md5 hash on the router and now everything works fine.

Best regards

[Marius Mueller]

But I would still like to use the md5 hash.

So any suggestions will be appreciated

[Marius Mueller]

I have found the problem.

now everything works fine.

Link to solution:

http://www.costiser.ro/2013/03/31/bgp-md5-authentication/#.Vs9iC_nhDcs

> > > an email to exabgp-users+unsubscribe@googlegroups.com.

[Thomas Mangin]

Hi Marius,

You sure learn things every day. Thank you for sharing this information
here.
I have added an entry on our G+ community about this ‘surprising’
behaviour.

Thomas

>>>>> an email to exabgp-users...@googlegroups.com.

>>>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>

> --
> You received this message because you are subscribed to the Google
> Groups "exabgp-users" group.
> To unsubscribe from this group and stop receiving emails from it, send

> an email to exabgp-users...@googlegroups.com.