Skip to content

Conversation

@KanjiMonster
Copy link
Contributor

For BGP TCP MD5 authentication to work, the appropriate support needs to be enabled in the kernel, so enable it.

Fixes errors from FRR's bgpd like:

Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available
Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.1.2 (sock=22): Protocol not available
Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available
Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.0.2 (sock=22): Protocol not available

@taraschornyiplv
Copy link
Contributor

reverify

@KanjiMonster KanjiMonster force-pushed the jogo_kernel_tcp_md5sig branch from f309733 to 37f5075 Compare August 4, 2023 13:33
For BGP TCP MD5 authentication to work, the appropriate support needs to
be enabled in the kernel, so enable it.

Fixes errors from FRR's bgpd like:

    Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available
    Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.1.2 (sock=22): Protocol not available
    Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available
    Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.0.2 (sock=22): Protocol not available

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
@KanjiMonster KanjiMonster force-pushed the jogo_kernel_tcp_md5sig branch from 37f5075 to 396a631 Compare August 24, 2023 08:40
@taraschornyiplv
Copy link
Contributor

reverify

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants