AnsweredAssumed Answered

not able to establish bgp peering using ipv6

Question asked by Abeja huhuhu on Nov 30, 2018
Latest reply on Dec 3, 2018 by Abeja huhuhu

We are currently testing to implement BGP4 using gaia and trying to advertise 1 IPv4 subnet and 1 IPv6 block. So far we can see that IPv4 peer has establish successfully and able to advertise IPv4 segment. However, for IPv6 we are not able to get peering up. after few hours troubleshooting, we find that our firewall not able to connect to the peer node. this is due that when we try to ping peer ip address we can see our firewall is replying using its own interface instead of sending the traffic out to peer node. which of course indirectly causing the the peer not able to establish for ipv6.

We did happened to get the peering up by doing below.

 

1. Unload firewall policy. when the firewall policy has been unloaded. we can see that our firewall able to ping peer node correctly.  show bgp peers also stated the peering has been establish and we are able to advertise IPv6 block.

when firewall policy has been loaded again, the peering will go down again and ping result shows that our firewall reply using its own IP.

 

2. changing the net.ipv6.conf.all.forwarding=0. we manage to get the peering to be establish again, even though the firewall policy has been loaded.  pinging to the node also show correct icmp response instead of replying using firewall ip. When we change net.ipv6.conf.all.forwarding to 1 again, the same issue arise again.

 

is there anyone that can help us to point out any setting needed to be change to make sure it is running correctly.

 

Thanks

Outcomes