FRRouting / frr

The FRRouting Protocol Suite
https://frrouting.org/
Other
3.18k stars 1.23k forks source link

EVPN-MPLS T1 Label lost #15678

Open murrant opened 4 months ago

murrant commented 4 months ago

Description

I'm attempting to use FRR as a route reflector for our EVPN/MPLS/ISIS-SR network. It seems to be losing the label for type 1 circuits and sending 1048575 instead (binary 11111111111111111111).

Update received by FRR: image

Update sent by FRR: image

Version

FRRouting 9.1 (hv-reflector-vm) on Linux(5.15.0-97-generic).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
configured with:
    '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' '--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'

How to reproduce

Set up EVPN-MPLS VPWS circuit on equipment with BGP peering and confirm functionality. Add FRR as route reflector and remove peering. The VPWS no long functions because the devices receive the wrong remote labels.

Expected behavior

Correct labels are sent.

Actual behavior

Labels are sent as 1048575

Additional context

Unclear if this is related to #7292 I have a packet capture with some moderately sensitive data (ASN) in it I can provide access to.

Checklist

baldoarturo commented 2 months ago

Can confirm I am able to reproduce this with a client We can provide PCAPs if needed

murrant commented 1 month ago

@baldoarturo If you can provide some PCAPs with generic data, that might help make it easier for someone to tackle this issue.