Closed aapostoliuk closed 16 hours ago
@dleroy @volodymyrhuti Can you look at it?
It seems that the issue is in a duplicate NHRP Authentication Extension field in this packet.
To clarify this is not fixed by #16480 ?
https://github.com/FRRouting/frr/pull/16480 does not fix this issue. It fixes duplicating if FRR is a HUB. But if FRR is a SPOKE, then no.
Description
I have tested https://github.com/FRRouting/frr/commit/6186368219b7ba120938786e5b8a306e68236a90 in the lab wich was described in https://github.com/FRRouting/frr/issues/16371. It works if VyOS as hub and Cisco as Spokes. I added to my lab FRR as a Spoke with NHRP Authentication. And I got an issue.
I have tested without NHRP Authentication and did not get this issue.
FRR HUB and CISCO SPOKE configuration exists in https://github.com/FRRouting/frr/issues/16371
FRR SPOKE configuration Netfilter:
FRR:
Interfaces
I collect tcpdumps of NHRP packets with NHRP Authentication and without NHRP Authentication on Cisco SPOKE side. authnhrp.dmp noauthnhrp.dmp
Version
How to reproduce
The main part of the lab exists in https://github.com/FRRouting/frr/issues/16371 addition was described in the description part
Expected behavior
SPOKES must have direct conversations. It works without NHRP Authentication.
Actual behavior
Cisco SPOKE sends an NHRP Error Indication Packet as a behavior on receiving the NHRP Resolution Reply packet from FRR as a SPOKE. As a result, Cisco SPOKE does not add routes to its routing table.
Additional context
No response
Checklist