Comments (3)
ecsv
commented on June 24, 2024
@nazco, @Nurtic-Vibe Btw. looks like it also fails having a direct connection:
Sep 10 00:51:53 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 00:55:14 vpn03 bird[26134]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 01:10:26 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 01:34:38 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 01:49:59 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 04:01:52 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 04:46:04 vpn03 bird[26134]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 06:42:43 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 10:05:43 vpn03 bird[26134]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 10:10:14 vpn03 bird[26134]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 10:30:53 vpn03 bird6[19663]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 10:47:40 vpn03 bird[26134]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
Sep 10 10:49:50 vpn03 bird[26134]: icvpn_rhein_neckar: Error: Bad peer AS: 76118
$ birdc show protocols icvpn_rhein_neckar
BIRD 1.6.3 ready.
name proto table state since info
icvpn_rhein_neckar BGP master start 11:24:52 Idle Received: Bad peer AS
$ birdc6 show protocols icvpn_rhein_neckar
BIRD 1.6.3 ready.
name proto table state since info
icvpn_rhein_neckar BGP master start 11:26:24 Idle Received: Bad peer AS
So it is using an "incorrect" ASN (which is not in the icvpn-meta) file all the time. Here is the complete OPEN message from rhein-necker IPv6:
Frame 2923: 147 bytes on wire (1176 bits), 147 bytes captured (1176 bits)
Ethernet II, Src: 72:51:a7:15:7a:bd (72:51:a7:15:7a:bd), Dst: e6:f8:0c:30:51:dc (e6:f8:0c:30:51:dc)
Internet Protocol Version 6, Src: fec0::a:cf:0:142, Dst: fec0::a:cf:0:25
Transmission Control Protocol, Src Port: 42838, Dst Port: 179, Seq: 1, Ack: 1, Len: 61
Border Gateway Protocol - OPEN Message
Marker: ffffffffffffffffffffffffffffffff
Length: 61
Type: OPEN Message (1)
Version: 4
My AS: 23456
Hold Time: 180
BGP Identifier: 172.23.138.1
Optional Parameters Length: 32
Optional Parameters
Optional Parameter: Capability
Parameter Type: Capability (2)
Parameter Length: 6
Capability: Multiprotocol extensions capability
Type: Multiprotocol extensions capability (1)
Length: 4
AFI: IPv4 (1)
Reserved: 00
SAFI: Unicast (1)
Optional Parameter: Capability
Parameter Type: Capability (2)
Parameter Length: 6
Capability: Multiprotocol extensions capability
Type: Multiprotocol extensions capability (1)
Length: 4
AFI: IPv6 (2)
Reserved: 00
SAFI: Unicast (1)
Optional Parameter: Capability
Parameter Type: Capability (2)
Parameter Length: 2
Capability: Route refresh capability (Cisco)
Type: Route refresh capability (Cisco) (128)
Length: 0
Optional Parameter: Capability
Parameter Type: Capability (2)
Parameter Length: 2
Capability: Route refresh capability
Type: Route refresh capability (2)
Length: 0
Optional Parameter: Capability
Parameter Type: Capability (2)
Parameter Length: 6
Capability: Support for 4-octet AS number capability
Type: Support for 4-octet AS number capability (65)
Length: 4
AS Number: 76118
from icvpn-meta.
leahoswald
commented on June 24, 2024
We are currently rebuilding our ICVPN setup, so there shouldn't be an announcement of our prefixes from our old peering point. But I see that the VPN connections and some peerings with the old ASN are still up. For the moment I will shut down the VPN to mitigate the wrong ASN problem.
from icvpn-meta.
ecsv
commented on June 24, 2024
Will close this now. It wasn't a failure in the icvpn-meta data but a misconfiguration on the rhein-neckar server - which was disabled to work around the problem.
from icvpn-meta.
Related Issues (20)
- Problem mit Community Netzen HOT 3
- Are these AS numbers valid? HOT 3
- Duplicate Domain (ffwk): vfnnrw westkueste HOT 2
- duplicate ipv4, kiel3 + bielefeld1 HOT 2
- duplicate ipv4 subnet 10.31/16: Berlin vs. Hameln HOT 1
- Reservierung für private Netze HOT 6
- How do I find a free ip for a new community? HOT 1
- Check missing communities
- Unexpected ICVPN BGP connections after "Grossreinemachen" HOT 13
- Too specific announced networks in celle and gera-greiz
- herne: Missing delegates in ruhrgebiet HOT 5
- ennepe-ruhr-kreis: Missing delegates in ruhrgebiet HOT 2
- bielefeld: Incorrect ASN for announced networks HOT 2
- franken: Missing delegation for 10.50.60.0/22 ASN 4242420205 HOT 6
- Hamburg announces wrong network 10.83.15.0/24 HOT 3
- rhein-neckar: Bad peer AS HOT 1
- neonetwork: new nameserver breaks mkdns HOT 1
- [dnssec] Any way to add dnssec trust anchor?
- Enforce hexadecimal representation of last IPv4 octet in last IPv6 hextet HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from icvpn-meta.