Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ripd: non-increasing sequence number after restart/reboot #15049

Closed
ffourcot opened this issue Dec 20, 2023 · 2 comments
Closed

ripd: non-increasing sequence number after restart/reboot #15049

ffourcot opened this issue Dec 20, 2023 · 2 comments
Labels
triage Needs further investigation

Comments

@ffourcot
Copy link

Hello,

On Debian system, after upgrading from bullseye (frr 7.5.1) to bookworm (frr 8.4.4) we lost some RIP connections with Cisco/Juniper routers. ripd was still accepting routes and everything looks fine on Debian system, but RIP packets are dropped by remote routers. We are using MD5 authentication.

After debugging and git bisect, it looks that this commit introduced the issue for us: 1568e88

I cannot fully blame remote routers, since we can read in RFC 4822:

      SEQUENCE NUMBER
         An unsigned 32-bit sequence number.  The sequence number MUST
         be non-decreasing for all messages sent from a given source
         router with a given Key ID value.

So at each restart of ripd, we go back to use "1" as sequence number, and RIP packets are detected as replay attacks by remote routers.

I fully understand that using 32 bits for time is an issue, but can we perhaps find another solution (permanent storage ?) to avoid sequence number going backwards?

@ffourcot ffourcot added the triage Needs further investigation label Dec 20, 2023
Copy link

This issue is stale because it has been open 180 days with no activity. Comment or remove the autoclose label in order to avoid having this issue closed.

@frrbot
Copy link

frrbot bot commented Jun 18, 2024

This issue will be automatically closed in the specified period unless there is further activity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triage Needs further investigation
Projects
None yet
Development

No branches or pull requests

1 participant