kern/123200: Server failure due to netgraph mpd and dhcpclient
Basil Zaulychny
zaulychny at yahoo.com
Mon May 19 19:30:07 UTC 2008
The following reply was made to PR kern/123200; it has been noted by GNATS.
From: Basil Zaulychny <zaulychny at yahoo.com>
To: bug-followup at FreeBSD.org, zaulychny at yahoo.com
Cc:
Subject: Re: kern/123200: Server failure due to netgraph mpd and dhcpclient
Date: Mon, 19 May 2008 11:57:25 -0700 (PDT)
--0-659038347-1211223445=:97365
Content-Type: text/plain; charset=us-ascii
Hello guys,
>At the very first look on your configuration, I've seen one misconfiguration
>which might cause problems: You're using a netmask greater than /32 for alias
>addresses on same subnet (take a look at I/F fxp0 addresses 192.168.0.101,
>192.168.0.199 and 192.168.0.1 share the same subnet (/24) and all three have
>a netmask of /24. Only one should have a /24, the others should be created
>as /32.
I have corrected configuration according to above mentioned notice and switch on the dump capabilites but all of this result in dead server crash without reboot and without dump (no files like vmcore.0 etc. no dump found server have said) after 2 days of uptime! :(
I have reconfigured server back, so until now server may crash but with the following reboot.
Next time I'll try WITNESS option enabled.
>Also please explain a bit about your DHCP issue (to me it's unclear what role
>dhcp_client may play here).
Some people claim that similar failure on Freebsd 6.x is due to Netgraph DHCP (dhclient) interaction... (They suspect bug inside netgraph )
>Do you start mpd from the DHCP script of vice versa?
No. mpd starts from rc.conf
>Please show us your mpd configuration. Also a look to the routing table might
>be useful.
mpd.conf (mpd5)
====================
default:
load vpn
load pptp_server
vpn:
create bundle static B1
set bundle disable noretry
set iface route default
set iface enable tcpmssfix
set iface idle 0
set iface enable nat
set iface up-script /home/basil/inet.sh
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
create link static L1 pptp
set link action bundle B1
set auth authname mylogin at my.isp.com
set link max-redial 0
set link mtu 1416
set link keep-alive 20 75
set pptp peer 10.0.0.1
set pptp disable windowing
open
pptp_server:
# Define dynamic IP address pool.
set ippool add pool1 192.168.8.2 192.168.8.254
# Create clonable bundle template named B
create bundle template B
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set ipcp yes vjcomp
# Specify IP address pool for dynamic assigment.
set ipcp ranges 192.168.8.1/32 ippool pool1
set ipcp dns 192.168.2.1
# set ipcp nbns 192.168.1.4
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
# Create clonable link template named L
create link template L pptp
# Set bundle template to use
set link action bundle B
# Multilink adds some overhead, but gives full 1500 MTU.
set link enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
# We can use use RADIUS authentication/accounting by including
# another config section with label 'radius'.
# load radius
set link keep-alive 10 60
# We reducing link mtu to avoid GRE packet fragmentation.
set link mtu 1416
# Configure PPTP
set pptp self 10.113.0.200
# set pptp self 192.168.0.101
# Allow to accept calls
set link enable incoming
====================
netstat -rn
----------------------------------------------
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 85.223.129.9 UGS 0 38220149 ng0
10/16 link#1 UCS 0 0 rl0
10.0.0.1 00:1c:0f:5c:ee:40 UHLW 1 167711651 rl0 251
10.24.4/22 link#1 UC 0 0 rl0
10.24.7.78 00:1d:7d:a4:33:b4 UHLW 1 1 rl0 833
10.113/24 link#2 UC 0 0 fxp0 =>
10.113/16 10.113.0.1 UGS 0 58324308 fxp0
10.113.0.1 00:07:e9:0a:6c:de UHLW 5 10 fxp0 1200
10.113.0.2 00:1d:60:36:96:0d UHLW 1 3 fxp0
10.113.0.6 00:02:44:5f:9c:00 UHLW 1 4 fxp0 1171
10.113.0.19 00:13:8f:db:10:43 UHLW 1 2 fxp0
10.113.0.35 00:19:db:7b:a3:99 UHLW 1 4 fxp0
10.113.0.36 00:02:44:86:00:c4 UHLW 1 6 fxp0 1093
10.113.0.41 00:0d:87:58:3e:ad UHLW 1 135 fxp0 1199
10.113.0.99 00:03:47:99:8e:a9 UHLW 1 103 fxp0 136
85.223.129.9 83.170.252.218 UH 1 0 ng0
127.0.0.1 127.0.0.1 UH 0 522765 lo0
192.168.0 link#2 UC 0 0 fxp0
192.168.0.1 00:02:b3:bc:32:2b UHLW 1 10569 lo0
192.168.0.3 00:13:77:02:ca:4b UHLW 1 89 fxp0 1174
192.168.0.10 00:04:61:45:e1:9e UHLW 1 1659931 fxp0 738
192.168.0.12 00:11:d8:9e:3c:69 UHLW 1 24059 fxp0
192.168.0.18 00:1d:60:2c:33:11 UHLW 1 1959 fxp0 181
192.168.0.20 00:13:d4:58:61:49 UHLW 1 2583 fxp0 539
192.168.0.26 00:00:21:2c:ee:e0 UHLW 1 17086 fxp0 814
192.168.0.27 00:02:44:40:e7:e0 UHLW 1 9 fxp0 821
192.168.0.30 00:02:44:74:83:12 UHLW 1 1114763 fxp0 1174
192.168.0.31 00:1e:8c:b5:e0:72 UHLW 1 1797609 fxp0 1094
192.168.0.47 00:1e:8c:14:55:7d UHLW 1 415 fxp0 807
192.168.0.56 00:0a:48:03:41:f8 UHLW 1 22371 fxp0 423
192.168.0.59 00:08:54:39:79:0b UHLW 1 29435 fxp0 1194
192.168.0.60 00:13:d3:6f:a5:97 UHLW 1 55 fxp0 1040
192.168.0.70 00:0c:76:ae:84:53 UHLW 1 9759 fxp0 924
192.168.0.77 00:13:8f:29:20:23 UHLW 1 188 fxp0 1073
192.168.0.99 00:03:47:99:8e:a9 UHLW 1 205 fxp0 256
192.168.0.101 00:02:b3:bc:32:2b UHLW 1 1 lo0
192.168.0.111 00:60:97:bc:a3:ad UHLW 1 55 fxp0 1200
192.168.0.201 00:16:d4:ae:af:03 UHLW 1 662 fxp0 985
192.168.0.255 ff:ff:ff:ff:ff:ff UHLWb 1 56772 fxp0
192.168.1 10.113.0.1 UGS 0 12222 fxp0
192.168.2 link#2 UC 0 0 fxp0
192.168.2.1 00:02:b3:bc:32:2b UHLW 1 10645 lo0
192.168.3 10.113.0.1 UGS 0 2412 fxp0
192.168.4 10.113.0.1 UGS 0 2387 fxp0
192.168.8.6 192.168.8.1 UH 0 134133 ng1
192.168.8.10 192.168.8.1 UH 0 3833 ng2
192.168.100 link#2 UC 0 0 fxp0
192.168.100.7 00:1b:fc:ca:01:38 UHLW 1 156128 fxp0 639
Best regards,
Basil Zaulychny
--0-659038347-1211223445=:97365
Content-Type: text/html; charset=us-ascii
<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"> Hello guys,<br><br>>At the very first look on your configuration, I've seen one misconfiguration <br>
>which might cause problems: You're using a netmask greater than /32 for alias <br>
>addresses on same subnet (take a look at I/F fxp0 addresses 192.168.0.101, <br>
>192.168.0.199 and 192.168.0.1 share the same subnet (/24) and all three have <br>
>a netmask of /24. Only one should have a /24, the others should be created <br>
>as /32.<br><br>I have corrected configuration according to above mentioned notice and switch on the dump capabilites but all of this result in dead server crash without reboot and without dump (no files like vmcore.0 etc. no dump found server have said) after 2 days of uptime! :(<br> I have reconfigured server back, so until now server may crash but with the following reboot.<br><br>Next time I'll try WITNESS option enabled.<br><br>>Also please explain a bit about your DHCP issue (to me it's unclear what role <br>
>dhcp_client may play here). <br>Some people claim that similar failure on Freebsd 6.x is due to Netgraph DHCP (dhclient) interaction... (They suspect bug inside netgraph )<br>>Do you start mpd from the DHCP script of vice versa? <br>No. mpd starts from rc.conf<br>
>Please show us your mpd configuration. Also a look to the routing table might <br>
>be useful. <br><div> mpd.conf (mpd5)<br>====================<br>default: <br> load vpn <br> load pptp_server<br><br>vpn: &nbs p; <br> create bundle static B1 <br> set bundle disable noretry
<br> set iface route default <br> set iface enable tcpmssfix <br> set iface idle 0 &n bsp; <br> set iface enable nat <br> set iface up-script
/home/basil/inet.sh <br> set ipcp ranges 0.0.0.0/0 0.0.0.0/0 <br> create link static L1 pptp <br> set link action bundle B1 &nb sp; <br> set auth authname mylogin at my.isp.com<br> set link max-redial 0 <br> set link mtu
1416 <br> set link keep-alive 20 75 <br> set pptp peer 10.0.0.1 &nb sp; <br> set pptp disable windowing <br> open
<br><br>pptp_server: <br># Define dynamic IP address pool. &n bsp; <br> set ippool add pool1 192.168.8.2 192.168.8.254
<br> <br># Create clonable bundle template named B &nbs p; <br> create bundle template B <br> set iface enable
proxy-arp <br> set iface idle 0 <br> set iface enable tcpmssfix <br> set ipcp yes
vjcomp <br># Specify IP address pool for dynamic assigment. <br> set ipcp ranges 192.168.8.1/32 ippool pool1 <br> set ipcp dns 192.168.2.1 <br># set ipcp nbns
192.168.1.4 <br># The five lines below enable Microsoft Point-to-Point encryption <br># (MPPE) using the ng_mppc(8) netgraph node type. <br> set bundle enable compression &nbs p; <br> set ccp yes
mppc <br> set mppc yes e40 &nbs p; <br> set mppc yes e128 <br> set mppc yes
stateless <br> &nbs p; <br># Create clonable link template named L <br> create link template L
pptp <br># Set bundle template to use <br> set link action bundle B <br># Multilink adds some overhead, but gives full 1500 MTU. <br> set link enable
multilink <br> set link yes acfcomp protocomp <br> set link no pap chap& nbsp; <br> set link enable
chap <br># We can use use RADIUS authentication/accounting by including <br># another config section with label 'radius'. <br>#   ; load radius <br> set link keep-alive 10
60 <br># We reducing link mtu to avoid GRE packet fragmentation. <br> set link mtu 1416 &nb sp; <br># Configure PPTP
<br> set pptp self 10.113.0.200 <br># set pptp self 192.168.0.101 <br># Allow to accept calls <br> set link enable
incoming <br>   ; <br>====================<br><br>netstat
-rn<br>----------------------------------------------<br>Internet: <br>Destination &n bsp; Gateway Flags Refs Use Netif Expire <br>default 85.223.129.9 UGS 0 38220149 ng0
<br>10/16 link#1 UCS 0 0 rl0 <br>10.0.0.1 00:1c:0f:5c:ee:40 UHLW 1 167711651 rl0&nbs p; 251<br>10.24.4/22 link#1 UC 0 0 rl0 <br>10.24.7.78 00:1d:7d:a4:33:b4
UHLW 1 1 rl0 833 <br>10.113/24 link#2 UC 0 0 fxp0 => <br>10.113/16 10.113.0 .1 UGS 0 58324308 fxp0 <br>10.113.0.1 00:07:e9:0a:6c:de UHLW 5 10 fxp0 1200 <br>10.113.0.2
00:1d:60:36:96:0d UHLW 1 3 fxp0 <br>10.113.0.6 00:02:44:5f:9c:00 UHLW 1 4 fxp0 1171 <br>10.113.0.19 00:13:8f:db:10:43 UHLW &nbs p; 1 2 fxp0 <br>10.113.0.35 00:19:db:7b:a3:99 UHLW 1 4 fxp0 <br>10.113.0.36 00:02:44:86:00:c4
UHLW 1 6 fxp0 1093 <br>10.113.0.41 00:0d:87:58:3e:ad UHLW 1 135 fxp0 1199 <br>10.113.0.99 00:03:47:99:8e:a9 UHLW 1 103 fxp0&nb sp; 136 <br>85.223.129.9 83.170.252.218 UH 1 0 ng0 <br>127.0.0.1 127.0.0.1
UH 0 522765 lo0 <br>192.168.0 link#2 UC 0 0 fxp0 <br>192.168.0.1 0 0:02:b3:bc:32:2b UHLW 1 10569 lo0 <br>192.168.0.3 00:13:77:02:ca:4b UHLW 1 89 fxp0 1174 <br>192.168.0.10 00:04:61:45:e1:9e
UHLW 1 1659931 fxp0 738 <br>192.168.0.12 00:11:d8:9e:3c:69 UHLW 1 24059 fxp0 <br>192.168.0.18 00:1d:60:2c:33:11 UHLW 1 1959 fxp0 181 <br>1 92.168.0.20 00:13:d4:58:61:49 UHLW 1 2583 fxp0 539 <br>192.168.0.26 00:00:21:2c:ee:e0 UHLW 1 17086 fxp0 814 <br>192.168.0.27 00:02:44:40:e7:e0
UHLW 1 9 fxp0 821 <br>192.168.0.30 00:02:44:74:83:12 UHLW 1 1114763 fxp0 1174 <br>192.168.0.31 00:1e:8c:b5:e0:72 UHLW 1 1797609 fxp0 1094 <br>192.168.0.47 &n bsp; 00:1e:8c:14:55:7d UHLW 1 415 fxp0 807 <br>192.168.0.56 00:0a:48:03:41:f8 UHLW 1 22371 fxp0 423 <br>192.168.0.59 00:08:54:39:79:0b
UHLW 1 29435 fxp0 1194 <br>192.168.0.60 00:13:d3:6f:a5:97 UHLW 1 55 fxp0 1040 <br>192.168.0.70 00:0c:76:ae:84:53 UHLW 1 9759 fxp0 924 <br>192.16 8.0.77 00:13:8f:29:20:23 UHLW 1 188 fxp0 1073 <br>192.168.0.99 00:03:47:99:8e:a9 UHLW 1 205 fxp0 256 <br>192.168.0.101 00:02:b3:bc:32:2b
UHLW 1 1 lo0 <br>192.168.0.111 00:60:97:bc:a3:ad UHLW 1 55 fxp0 1200 <br>192.168.0.201 00:16:d4:ae:af:03 UHLW 1 662  ; fxp0 985 <br>192.168.0.255 ff:ff:ff:ff:ff:ff UHLWb 1 56772 fxp0 <br>192.168.1 10.113.0.1 UGS 0 12222
fxp0 <br>192.168.2 link#2 UC 0 0 fxp0 <br>192.168.2.1 00:02:b3:bc:32:2b UHLW 1 10645 lo0 <br>192.168.3 10.113.0.1 UGS 0 2412 fxp0 <br>192.168.4
10.113.0.1 UGS 0 2387 fxp0 <br>192.168.8.6 192.168.8.1 UH 0 134133 ng1 <br>192.168.8.10 19 2.168.8.1 UH 0 3833 ng2 <br>192.168.100 link#2 UC 0 0
fxp0 <br>192.168.100.7 00:1b:fc:ca:01:38 UHLW 1 156128 fxp0 639 <br><br><br><br></div>Best regards,<br> Basil Zaulychny<div><br></div></div><br>
</body></html>
--0-659038347-1211223445=:97365--
More information about the freebsd-bugs
mailing list