Open mnaiem81 opened 2 months ago
Hi @mnaiem81 , this looks like a label manager issue in BGP, where BGP does not know:
show bgp labelpool chunks
show bgp labelpool inuse
show bgp labelpool ledger
show bgp labelpool requests
show bgp labelpool summary
Hi @pguibert6WIND, Please find output below from FRR that currently has 227 VRFs configured some of them has no labels assigned because of old VRFs were deleted and new ones added after a point where more than 256 were configured.
FRR1# show bgp labelpool chunks
First Last Size nfree
-------------------------------------------
464 719 256 0
FRR1# show bgp labelpool inuse
Prefix Label
---------------------------
VRF 464
VRF 465
VRF 466
VRF 467
VRF 468
VRF 469
VRF 470
VRF 471
VRF 472
VRF 473
VRF 474
VRF 475
VRF 476
VRF 477
VRF 478
VRF 479
VRF 480
VRF 481
VRF 482
VRF 483
VRF 484
VRF 485
VRF 486
VRF 487
VRF 488
VRF 489
VRF 490
VRF 491
VRF 492
VRF 493
VRF 494
VRF 495
VRF 496
VRF 497
VRF 498
VRF 499
VRF 500
VRF 501
VRF 502
VRF 503
VRF 504
VRF 505
VRF 506
VRF 507
VRF 508
VRF 509
VRF 510
VRF 511
VRF 512
VRF 513
VRF 514
VRF 515
VRF 516
VRF 517
VRF 518
VRF 519
VRF 520
VRF 521
VRF 522
VRF 523
VRF 524
VRF 525
VRF 526
VRF 527
VRF 528
VRF 529
VRF 530
VRF 531
VRF 532
VRF 533
VRF 534
VRF 535
VRF 536
VRF 537
VRF 538
VRF 539
VRF 540
VRF 541
VRF 542
VRF 543
VRF 544
VRF 545
VRF 546
VRF 547
VRF 548
VRF 549
VRF 550
VRF 551
VRF 552
VRF 553
VRF 554
VRF 555
VRF 556
VRF 557
VRF 558
VRF 559
VRF 560
VRF 561
VRF 562
VRF 563
VRF 564
VRF 565
VRF 566
VRF 567
VRF 568
VRF 569
VRF 570
VRF 571
VRF 572
VRF 573
VRF 574
VRF 575
VRF 576
VRF 577
VRF 578
VRF 579
VRF 580
VRF 581
VRF 582
VRF 583
VRF 584
VRF 585
VRF 586
VRF 587
VRF 588
VRF 589
VRF 590
VRF 591
VRF 592
VRF 593
VRF 594
VRF 595
VRF 596
VRF 597
VRF 598
VRF 599
VRF 600
VRF 601
VRF 602
VRF 603
VRF 604
VRF 605
VRF 606
VRF 607
VRF 608
VRF 609
VRF 610
VRF 611
VRF 612
VRF 613
VRF 614
VRF 615
VRF 616
VRF 617
VRF 618
VRF 619
VRF 620
VRF 621
VRF 622
VRF 623
VRF 624
VRF 625
VRF 626
VRF 627
VRF 628
VRF 629
VRF 630
VRF 631
VRF 632
VRF 633
VRF 634
VRF 635
VRF 636
VRF 637
VRF 638
VRF 639
VRF 640
VRF 641
VRF 642
VRF 643
VRF 644
VRF 645
VRF 646
VRF 647
VRF 648
VRF 649
VRF 650
VRF 651
VRF 652
VRF 653
VRF 654
VRF 655
VRF 656
VRF 657
VRF 658
VRF 659
VRF 660
VRF 661
VRF 662
VRF 663
VRF 664
VRF 665
VRF 666
VRF 667
VRF 668
VRF 669
VRF 670
VRF 671
VRF 672
VRF 673
VRF 674
VRF 675
VRF 676
VRF 677
VRF 678
VRF 679
VRF 680
VRF 681
VRF 682
VRF 683
VRF 684
VRF 685
VRF 686
VRF 687
VRF 688
VRF 689
VRF 690
VRF 691
VRF 692
VRF 693
VRF 694
VRF 695
VRF 696
VRF 697
VRF 698
VRF 699
VRF 700
VRF 701
VRF 702
VRF 703
VRF 704
VRF 705
VRF 706
VRF 707
VRF 708
VRF 709
VRF 710
VRF 711
VRF 712
VRF 713
VRF 714
VRF 715
VRF 716
VRF 717
VRF 718
VRF 719
FRR1# show bgp labelpool ledger
Prefix Label
---------------------------
VRF 675
VRF 676
VRF 677
VRF 678
VRF 679
VRF 681
VRF 684
VRF 686
VRF 687
VRF 697
VRF 703
VRF 689
VRF 4294967295
VRF 709
VRF 4294967295
VRF 710
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 654
VRF 690
VRF 717
VRF 655
VRF 656
VRF 657
VRF 658
VRF 683
VRF 706
VRF 707
VRF 708
VRF 718
VRF 4294967295
VRF 4294967295
VRF 659
VRF 660
VRF 699
VRF 704
VRF 719
VRF 661
VRF 662
VRF 700
VRF 705
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 663
VRF 664
VRF 665
VRF 666
VRF 701
VRF 4294967295
VRF 4294967295
VRF 667
VRF 691
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 668
VRF 669
VRF 670
VRF 671
VRF 672
VRF 673
VRF 692
VRF 674
VRF 630
VRF 631
VRF 632
VRF 633
VRF 634
VRF 635
VRF 636
VRF 637
VRF 638
VRF 639
VRF 712
VRF 4294967295
VRF 640
VRF 641
VRF 642
VRF 680
VRF 713
VRF 643
VRF 644
VRF 645
VRF 646
VRF 647
VRF 648
VRF 695
VRF 714
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 649
VRF 696
VRF 715
VRF 650
VRF 651
VRF 682
VRF 685
VRF 652
VRF 716
VRF 4294967295
VRF 653
VRF 606
VRF 607
VRF 608
VRF 609
VRF 610
VRF 611
VRF 612
VRF 4294967295
VRF 613
VRF 614
VRF 615
VRF 616
VRF 617
VRF 618
VRF 619
VRF 688
VRF 620
VRF 621
VRF 622
VRF 623
VRF 624
VRF 625
VRF 694
VRF 4294967295
VRF 626
VRF 627
VRF 628
VRF 4294967295
VRF 629
VRF 582
VRF 693
VRF 4294967295
VRF 583
VRF 584
VRF 585
VRF 586
VRF 587
VRF 588
VRF 589
VRF 590
VRF 591
VRF 592
VRF 593
VRF 594
VRF 595
VRF 596
VRF 597
VRF 598
VRF 599
VRF 600
VRF 601
VRF 602
VRF 603
VRF 604
VRF 605
VRF 4294967295
VRF 4294967295
VRF 4294967295
VRF 558
VRF 559
VRF 560
VRF 561
VRF 562
VRF 563
VRF 564
VRF 565
VRF 566
VRF 567
VRF 568
VRF 569
VRF 570
VRF 571
VRF 572
VRF 573
VRF 574
VRF 575
VRF 576
VRF 4294967295
VRF 577
VRF 578
VRF 579
VRF 580
VRF 581
VRF 546
VRF 4294967295
VRF 547
VRF 548
VRF 549
VRF 550
VRF 551
VRF 552
VRF 553
VRF 554
VRF 555
VRF 556
VRF 557
VRF 534
VRF 535
VRF 536
VRF 702
VRF 537
VRF 4294967295
VRF 538
VRF 539
VRF 540
VRF 541
VRF 542
VRF 543
VRF 544
VRF 545
VRF 522
VRF 523
VRF 524
VRF 525
VRF 526
VRF 527
VRF 528
VRF 529
VRF 530
VRF 4294967295
VRF 531
VRF 532
VRF 533
VRF 510
VRF 511
VRF 512
VRF 513
VRF 514
VRF 515
VRF 516
VRF 517
VRF 518
VRF 519
VRF 711
VRF 520
VRF 521
VRF 504
VRF 505
VRF 506
VRF 507
VRF 508
VRF 509
VRF 498
VRF 499
VRF 500
VRF 501
VRF 502
VRF 503
VRF 492
VRF 493
VRF 494
VRF 495
VRF 496
VRF 497
VRF 486
VRF 487
VRF 488
VRF 489
VRF 490
VRF 491
VRF 483
VRF 484
VRF 485
VRF 480
VRF 481
VRF 4294967295
VRF 482
VRF 477
VRF 478
VRF 479
VRF 474
VRF 4294967295
VRF 475
VRF 4294967295
VRF 4294967295
VRF 476
VRF 471
VRF 472
VRF 473
VRF 468
VRF 469
VRF 4294967295
VRF 470
VRF 465
VRF 466
VRF 4294967295
VRF 467
VRF 698
VRF 464
FRR1# show bgp labelpool requests
Prefix
----------------
FRR1# show bgp labelpool summary
Labelpool Summary
-----------------
Ledger: 302
InUse: 256
Requests: 0
LabelChunks: 1
Pending: 256
Reconnects: 1
Is this the same for FRR v10 ? or a plan to fix?
Is this the same for FRR v10 ? or a plan to fix?
I think the issue still remains, and a fix needs to be done. BGP label manager issue.
No plan to fix as of today. you should contact your support team:)
Hi @mnaiem81 ,
Would it be possible to share "show running-config" of problematic node and its one of the peer ? ( peer which has vpnv4 session with problematic node. )
Thanks
here is config, I just removed one PL named 'PL.NET4.SPECIFIC' which permits some public IPs but nothing fancy there just PL.
'''Current configuration: ! frr version 9.1_git frr defaults traditional hostname net-prod-011 no ipv6 forwarding service integrated-vtysh-config ! ip route 100.79.254.104/32 Null0 ip route 100.79.254.126/32 Null0 ip route 100.79.254.141/32 Null0 ip route 100.79.254.150/32 Null0 ! vrf 1ecee3627 ip route 0.0.0.0/0 172.27.0.2 exit-vrf ! vrf cecda5258 ip route 0.0.0.0/0 172.27.2.2 exit-vrf ! vrf 596961922 ip route 0.0.0.0/0 172.27.0.2 exit-vrf ! vrf 85405a33d ip route 0.0.0.0/0 172.27.1.2 exit-vrf ! vrf 43a3dcf89 ip route 0.0.0.0/0 172.27.1.2 exit-vrf ! vrf e067b6238 ip route 0.0.0.0/0 172.27.0.2 exit-vrf ! vrf 59877e10e ip route 0.0.0.0/0 172.27.0.2 exit-vrf ! vrf 14bba0212 ip route 0.0.0.0/0 172.27.0.2 exit-vrf ! vrf 24933e019 ip route 0.0.0.0/0 172.27.0.2 exit-vrf ! interface lo ip router isis BACKBONE isis circuit-type level-2-only isis passive exit ! interface bond0.3058 ip router isis BACKBONE isis bfd isis circuit-type level-2-only exit ! interface bond0.3056 ip router isis BACKBONE isis bfd isis circuit-type level-2-only exit ! router bgp 11111 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp default ipv4-unicast no bgp graceful-restart notification no bgp network import-check neighbor 10.10.255.238 remote-as 11111 neighbor 10.10.255.238 description CR02 neighbor 10.10.255.238 update-source lo neighbor 10.10.255.238 advertisement-interval 1 neighbor 10.10.255.238 timers 3 12 neighbor 10.10.255.239 remote-as 11111 neighbor 10.10.255.239 description CR01 neighbor 10.10.255.239 update-source lo neighbor 10.10.255.239 advertisement-interval 1 neighbor 10.10.255.239 timers 3 12 ! address-family ipv4 unicast network 10.10.243.3/32 network 10.10.243.4/32 network 100.79.254.104/32 network 100.79.254.126/32 network 100.79.254.141/32 network 100.79.254.150/32 neighbor 10.10.255.238 activate neighbor 10.10.255.238 route-map RM.NET4.SERVER.TO.CORE out neighbor 10.10.255.239 activate neighbor 10.10.255.239 route-map RM.NET4.SERVER.TO.CORE out exit-address-family ! address-family ipv4 vpn neighbor 10.10.255.238 activate neighbor 10.10.255.238 next-hop-self force neighbor 10.10.255.239 activate neighbor 10.10.255.239 next-hop-self force exit-address-family exit ! router bgp 11111 vrf 08cbf80bd no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7254 rt vpn both 65000:7254 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 0afb24aa2 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7118 rt vpn both 65000:7118 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 186c59d5c no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7311 rt vpn both 65000:7311 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 1ec8cca2a no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7309 rt vpn both 65000:7309 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 2054f26ba no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7297 rt vpn both 65000:7297 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 270339265 bgp router-id 172.27.3.1 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export 80069 rd vpn export 5655:7423 rt vpn both 65000:7423 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 290e9d29c no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7305 rt vpn both 65000:7305 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 2c8472cc2 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7132 rt vpn both 65000:7132 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 2fbb1f6dd no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7259 rt vpn both 65000:7259 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 3885ab1b8 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7028 rt vpn both 65000:7028 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 3abaeeeb4 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7291 rt vpn both 65000:7291 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 3e327bcd4 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7312 rt vpn both 65000:7312 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 40dd739c4 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7024 rt vpn both 65000:7024 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 414b880d5 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7291 rt vpn both 65000:7291 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 43cbaf757 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7041 rt vpn both 65000:7041 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 45d7a2810 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7239 rt vpn both 65000:7239 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 49118966d no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7296 rt vpn both 65000:7296 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 4e3ac47f9 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7214 rt vpn both 65000:7214 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 52362fc22 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7301 rt vpn both 65000:7301 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 609e5e250 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7240 rt vpn both 65000:7240 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 6443ba47d no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7236 rt vpn both 65000:7236 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 6c197e6a1 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7184 rt vpn both 65000:7184 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 70cfd238b no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7290 rt vpn both 65000:7290 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 731fb072d no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7301 rt vpn both 65000:7301 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 7a105972d no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7299 rt vpn both 65000:7299 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 7c177a060 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7139 rt vpn both 65000:7139 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 7e2b34e13 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7006 rt vpn both 65000:7006 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 88fd4b53e no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7275 rt vpn both 65000:7275 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 896db5dfe no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7176 rt vpn both 65000:7176 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 8982671db no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7293 rt vpn both 65000:7293 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 8a73b4ac1 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7083 rt vpn both 65000:7083 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 933a51cbf no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7202 rt vpn both 65000:7202 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 939c7cf77 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7305 rt vpn both 65000:7305 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 94e7942f7 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7287 rt vpn both 65000:7287 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 9638d892e no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7228 rt vpn both 65000:7228 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf a0d9c5342 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7093 rt vpn both 65000:7093 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf b3b17b23d no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7425 rt vpn both 65000:7425 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf b40a3c86e no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7008 rt vpn both 65000:7008 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf bb2671448 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7173 rt vpn both 65000:7173 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf bd0ef53ac no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7310 rt vpn both 65000:7310 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf bfc6fd996 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7288 rt vpn both 65000:7288 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf c0f5d38c1 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7020 rt vpn both 65000:7020 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf c78e3d3d2 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7040 rt vpn both 65000:7040 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf dec7927f1 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7172 rt vpn both 65000:7172 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf ec57b3b83 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7146 rt vpn both 65000:7146 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf efdcd37cd no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7121 rt vpn both 65000:7121 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf f3f8c577c no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7327 rt vpn both 65000:7327 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf fff044d15 no bgp ebgp-requires-policy no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification no bgp network import-check ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7120 rt vpn both 65000:7120 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 135e15bcb no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7451 rt vpn both 65000:7451 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf eb7200633 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7471 rt vpn both 65000:7471 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf cecda5258 bgp router-id 172.27.2.1 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 80046 rd vpn export 5655:7181 rt vpn both 65000:7181 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 26a698071 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7481 rt vpn both 65000:7481 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 596961922 bgp router-id 172.27.0.1 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected redistribute static label vpn export auto rd vpn export 5655:7168 rt vpn both 65000:7168 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 1ecee3627 bgp router-id 172.27.0.1 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 80041 rd vpn export 5655:7105 rt vpn both 65000:7105 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf TEST_VRF no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast network 172.27.27.27/32 redistribute connected label vpn export auto rd vpn export 5655:9999 rt vpn both 65000:9999 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf TEST_VRF1 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export 654 rd vpn export 5655:8777 rt vpn both 65000:8777 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf TEST_VRF2 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export 655 rd vpn export 5655:9777 rt vpn both 65000:9777 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf TEST_VRF3 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export 653 rd vpn export 5655:9666 rt vpn both 65000:9666 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf TEST_VRF4 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:8555 rt vpn both 65000:8555 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 696591593 no bgp suppress-duplicates no bgp hard-administrative-reset no bgp graceful-restart notification ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7410 rt vpn both 65000:7410 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 410b4b96d ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7519 rt vpn both 65000:7519 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf d906abfdc ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7059 rt vpn both 65000:7059 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf bf0f96c09 ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7440 rt vpn both 65000:7440 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf ef04357c5 ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7261 rt vpn both 65000:7261 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 85405a33d bgp router-id 172.27.1.1 ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 472 rd vpn export 5655:7546 rt vpn both 65000:7546 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 6814c54b5 ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7562 rt vpn both 65000:7562 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf a92aaa145 ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7570 rt vpn both 65000:7570 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf a8dc7065b bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80030 rd vpn export 5655:7191 rt vpn both 65000:7191 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 43a3dcf89 bgp router-id 172.27.1.1 ! address-family ipv4 unicast redistribute connected redistribute static label vpn export auto rd vpn export 5655:7061 rt vpn both 65000:7061 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf a871be4ac bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export auto rd vpn export 5655:7098 rt vpn both 65000:7098 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 14bba0212 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 480 rd vpn export 5655:7103 rt vpn both 65000:7103 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 8091152e8 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80039 rd vpn export 5655:7022 rt vpn both 65000:7022 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 24933e019 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 80019 rd vpn export 5655:7001 rt vpn both 65000:7001 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 20e1dd936 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80003 rd vpn export 5655:7020 rt vpn both 65000:7020 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf e067b6238 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 475 rd vpn export 5655:7027 rt vpn both 65000:7027 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 59877e10e bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected redistribute static label vpn export 80001 rd vpn export 5655:7023 rt vpn both 65000:7023 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 15099f360 bgp router-id 172.27.1.1 ! address-family ipv4 unicast redistribute connected label vpn export 80005 rd vpn export 5655:7545 rt vpn both 65000:7545 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 9f541228e bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80002 rd vpn export 5655:7012 rt vpn both 65000:7012 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 631461e60 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80004 rd vpn export 5655:7013 rt vpn both 65000:7013 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 2ad5f00f2 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80006 rd vpn export 5655:7015 rt vpn both 65000:7015 export vpn import vpn exit-address-family exit ! router bgp 11111 vrf 11607d775 bgp router-id 172.27.0.1 ! address-family ipv4 unicast redistribute connected label vpn export 80007 rd vpn export 5655:7024 rt vpn both 65000:7024 export vpn import vpn exit-address-family exit ! mpls ldp router-id 10.10.243.4 ! address-family ipv4 discovery transport-address 10.10.243.4 ! interface bond0.3056 exit ! interface bond0.3058 exit ! exit-address-family ! exit ! router isis BACKBONE is-type level-2-only net 49.0000.0001.0002.0111.00 lsp-timers gen-interval 5 refresh-interval 900 max-lifetime 1200 spf-interval 5 log-adjacency-changes exit ! ip prefix-list 192-168-0-0 seq 5 permit 192.168.0.0/16 le 32 ip prefix-list ALLOW-VPN seq 5 permit 172.20.1.56/30 ip prefix-list ALLOW-VPN seq 6 permit 172.20.1.60/30 ip prefix-list ALLOW-VPN seq 10 deny any ip prefix-list EXPORT-PRIVATE seq 5 permit 10.14.0.10/32 le 32 ip prefix-list EXPORT-PRIVATE seq 10 permit 192.168.20.0/24 le 32 ip prefix-list EXPORT-PRIVATE seq 1000 deny any ip prefix-list PL.NET4.DENY.ALL seq 5 deny 0.0.0.0/0 le 32 ! route-map ALLOW-VPN permit 10 match ip address prefix-list ALLOW-VPN exit ! route-map EXPORT-PRIVATE permit 10 match ip address prefix-list EXPORT-PRIVATE exit ! route-map RM.NET4.192-168 permit 10 match ip address prefix-list 192-168-0-0 exit ! route-map RM.NET4.DENY.ALL permit 10 match ip address prefix-list PL.NET4.DENY.ALL exit ! route-map RM.NET4.SERVER.TO.CORE permit 10 match ip address prefix-list PL.NET4.SPECIFIC exit ! bfd peer 100.65.73.1 interface bond0.3056 transmit-interval 750 receive-interval 750 exit ! peer 100.65.73.129 interface bond0.3058 transmit-interval 750 receive-interval 750 exit ! exit ! end'''
connected VPN config
''' router bgp 11111 neighbor 10.10.243.3 remote-as 11111 timers 3 12 advertisement-interval 1 description net-prod-011 update-source Loopback0 graceful-restart disable address-family ipv4 unicast route-policy RP.NET4.PERMIT.ALL in route-reflector-client route-policy RP.NET4.DEFAULT.ONLY out default-originate ! address-family vpnv4 unicast route-policy RP.NET4.PERMIT.ALL in route-reflector-client route-policy RP.NET4.PERMIT.ALL out '''
r1# show version FRRouting 10.3-dev-MyOwnFRRVersion-g7c1034087 (r1) on Linux(5.15.0-76-generic). Copyright 1996-2005 Kunihiro Ishiguro, et al. This is a git build of frr-10.3-dev-85-g7c1034087 Associated branch(es): local:master github/FRRouting/frr.git/master
400 911 512 196
144 399 256 0
16 143 128 0
r1# r1#
I have around 800 BGP vpnv4 sessions but seeing 2 things.
May be to hit the first problem ( breaking vpnv4 session, may I need to have some LDP labels as well as the submitter has ? ), Currently I dont have LDP running. I just have vpnv4 EBGP sessions.
I will try extending the current topo to include LDP as well and check the behavior.
Please suggest if there are better ideas @donaldsharp @pguibert6WIND.
Thanks
Description
I see an issue with v9.1 where I deploy +255 VRFs per server with dynamically assigned VPN label using 'label vpn export auto'
Two below scenarios happen here:
What is the problem?
Output of show mpls table below from one FRR with 260 VRFs, the last configured 15 VRFs not working because no labels for them although from table label#466,469,471,472, etc are free from previously deleted VRFs.
VRF config (nothing special)
Version
How to reproduce
To reproduce, run 'show debugg label-table' to check assigned pool chunk. If it is 128, you need to create more than 128 VRFs and verify from show mpls table. if it is 256, you need to create more than 256 VRFs and verify from show mpls table.
Delete any VRF to free-up its assigned label and try to get it dynamically assigned again.
Expected behavior
Expected behaviors here:
Actual behavior
Limitation of supported VRFs per server limits its usage
Additional context
No response
Checklist