]>
Commit | Line | Data |
---|---|---|
718e3744 | 1 | /* BGP open message handling |
2 | Copyright (C) 1998, 1999 Kunihiro Ishiguro | |
3 | ||
4 | This file is part of GNU Zebra. | |
5 | ||
6 | GNU Zebra is free software; you can redistribute it and/or modify it | |
7 | under the terms of the GNU General Public License as published by the | |
8 | Free Software Foundation; either version 2, or (at your option) any | |
9 | later version. | |
10 | ||
11 | GNU Zebra is distributed in the hope that it will be useful, but | |
12 | WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
14 | General Public License for more details. | |
15 | ||
16 | You should have received a copy of the GNU General Public License | |
17 | along with GNU Zebra; see the file COPYING. If not, write to the Free | |
18 | Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA | |
19 | 02111-1307, USA. */ | |
20 | ||
21 | #include <zebra.h> | |
22 | ||
23 | #include "linklist.h" | |
24 | #include "prefix.h" | |
25 | #include "stream.h" | |
26 | #include "thread.h" | |
27 | #include "log.h" | |
28 | #include "command.h" | |
6d58272b | 29 | #include "memory.h" |
718e3744 | 30 | |
31 | #include "bgpd/bgpd.h" | |
32 | #include "bgpd/bgp_attr.h" | |
33 | #include "bgpd/bgp_debug.h" | |
34 | #include "bgpd/bgp_fsm.h" | |
35 | #include "bgpd/bgp_packet.h" | |
36 | #include "bgpd/bgp_open.h" | |
0b2aa3a0 | 37 | #include "bgpd/bgp_aspath.h" |
538621f2 | 38 | #include "bgpd/bgp_vty.h" |
39 | ||
718e3744 | 40 | /* BGP-4 Multiprotocol Extentions lead us to the complex world. We can |
41 | negotiate remote peer supports extentions or not. But if | |
42 | remote-peer doesn't supports negotiation process itself. We would | |
43 | like to do manual configuration. | |
44 | ||
45 | So there is many configurable point. First of all we want set each | |
46 | peer whether we send capability negotiation to the peer or not. | |
47 | Next, if we send capability to the peer we want to set my capabilty | |
48 | inforation at each peer. */ | |
49 | ||
50 | void | |
51 | bgp_capability_vty_out (struct vty *vty, struct peer *peer) | |
52 | { | |
5228ad27 | 53 | char *pnt; |
54 | char *end; | |
6d58272b PJ |
55 | struct capability_mp_data mpc; |
56 | struct capability_header *hdr; | |
718e3744 | 57 | |
58 | pnt = peer->notify.data; | |
59 | end = pnt + peer->notify.length; | |
6d58272b | 60 | |
718e3744 | 61 | while (pnt < end) |
62 | { | |
6d58272b | 63 | if (pnt + sizeof (struct capability_mp_data) + 2 > end) |
718e3744 | 64 | return; |
6d58272b PJ |
65 | |
66 | hdr = (struct capability_header *)pnt; | |
67 | if (pnt + hdr->length + 2 > end) | |
718e3744 | 68 | return; |
69 | ||
6d58272b PJ |
70 | memcpy (&mpc, pnt + 2, sizeof(struct capability_mp_data)); |
71 | ||
72 | if (hdr->code == CAPABILITY_CODE_MP) | |
718e3744 | 73 | { |
74 | vty_out (vty, " Capability error for: Multi protocol "); | |
75 | ||
6d58272b | 76 | switch (ntohs (mpc.afi)) |
718e3744 | 77 | { |
78 | case AFI_IP: | |
79 | vty_out (vty, "AFI IPv4, "); | |
80 | break; | |
81 | case AFI_IP6: | |
82 | vty_out (vty, "AFI IPv6, "); | |
83 | break; | |
84 | default: | |
6d58272b | 85 | vty_out (vty, "AFI Unknown %d, ", ntohs (mpc.afi)); |
718e3744 | 86 | break; |
87 | } | |
6d58272b | 88 | switch (mpc.safi) |
718e3744 | 89 | { |
90 | case SAFI_UNICAST: | |
91 | vty_out (vty, "SAFI Unicast"); | |
92 | break; | |
93 | case SAFI_MULTICAST: | |
94 | vty_out (vty, "SAFI Multicast"); | |
95 | break; | |
96 | case SAFI_UNICAST_MULTICAST: | |
97 | vty_out (vty, "SAFI Unicast Multicast"); | |
98 | break; | |
99 | case BGP_SAFI_VPNV4: | |
100 | vty_out (vty, "SAFI MPLS-VPN"); | |
101 | break; | |
102 | default: | |
6d58272b | 103 | vty_out (vty, "SAFI Unknown %d ", mpc.safi); |
718e3744 | 104 | break; |
105 | } | |
106 | vty_out (vty, "%s", VTY_NEWLINE); | |
107 | } | |
6d58272b | 108 | else if (hdr->code >= 128) |
718e3744 | 109 | vty_out (vty, " Capability error: vendor specific capability code %d", |
6d58272b | 110 | hdr->code); |
718e3744 | 111 | else |
112 | vty_out (vty, " Capability error: unknown capability code %d", | |
6d58272b | 113 | hdr->code); |
718e3744 | 114 | |
6d58272b | 115 | pnt += hdr->length + 2; |
718e3744 | 116 | } |
117 | } | |
118 | ||
6d58272b PJ |
119 | static void |
120 | bgp_capability_mp_data (struct stream *s, struct capability_mp_data *mpc) | |
718e3744 | 121 | { |
6d58272b PJ |
122 | mpc->afi = stream_getw (s); |
123 | mpc->reserved = stream_getc (s); | |
124 | mpc->safi = stream_getc (s); | |
125 | } | |
718e3744 | 126 | |
6d58272b PJ |
127 | int |
128 | bgp_afi_safi_valid_indices (afi_t afi, safi_t *safi) | |
129 | { | |
130 | /* VPNvX are AFI specific */ | |
131 | if ((afi == AFI_IP6 && *safi == BGP_SAFI_VPNV4) | |
132 | || (afi == AFI_IP && *safi == BGP_SAFI_VPNV6)) | |
718e3744 | 133 | { |
6d58272b PJ |
134 | zlog_warn ("Invalid afi/safi combination (%u/%u)", afi, *safi); |
135 | return 0; | |
718e3744 | 136 | } |
6d58272b PJ |
137 | |
138 | switch (afi) | |
718e3744 | 139 | { |
6d58272b PJ |
140 | case AFI_IP: |
141 | #ifdef HAVE_IPV6 | |
142 | case AFI_IP6: | |
143 | #endif | |
144 | switch (*safi) | |
145 | { | |
146 | /* BGP VPNvX SAFI isn't contigious with others, remap */ | |
147 | case BGP_SAFI_VPNV4: | |
148 | case BGP_SAFI_VPNV6: | |
149 | *safi = SAFI_MPLS_VPN; | |
150 | case SAFI_UNICAST: | |
151 | case SAFI_MULTICAST: | |
152 | case SAFI_MPLS_VPN: | |
153 | return 1; | |
154 | } | |
718e3744 | 155 | } |
6d58272b PJ |
156 | zlog_debug ("unknown afi/safi (%u/%u)", afi, *safi); |
157 | ||
158 | return 0; | |
159 | } | |
160 | ||
161 | /* Set negotiated capability value. */ | |
162 | static int | |
163 | bgp_capability_mp (struct peer *peer, struct capability_header *hdr) | |
164 | { | |
165 | struct capability_mp_data mpc; | |
166 | struct stream *s = BGP_INPUT (peer); | |
167 | ||
168 | bgp_capability_mp_data (s, &mpc); | |
169 | ||
170 | if (BGP_DEBUG (normal, NORMAL)) | |
171 | zlog_debug ("%s OPEN has MP_EXT CAP for afi/safi: %u/%u", | |
172 | peer->host, mpc.afi, mpc.safi); | |
173 | ||
174 | if (!bgp_afi_safi_valid_indices (mpc.afi, &mpc.safi)) | |
175 | return -1; | |
176 | ||
177 | /* Now safi remapped, and afi/safi are valid array indices */ | |
178 | peer->afc_recv[mpc.afi][mpc.safi] = 1; | |
179 | ||
180 | if (peer->afc[mpc.afi][mpc.safi]) | |
e08286bc | 181 | peer->afc_nego[mpc.afi][mpc.safi] = 1; |
6d58272b PJ |
182 | else |
183 | return -1; | |
718e3744 | 184 | |
185 | return 0; | |
186 | } | |
187 | ||
94f2b392 | 188 | static void |
718e3744 | 189 | bgp_capability_orf_not_support (struct peer *peer, afi_t afi, safi_t safi, |
190 | u_char type, u_char mode) | |
191 | { | |
192 | if (BGP_DEBUG (normal, NORMAL)) | |
8325cd7f | 193 | zlog_debug ("%s Addr-family %d/%d has ORF type/mode %d/%d not supported", |
718e3744 | 194 | peer->host, afi, safi, type, mode); |
195 | } | |
196 | ||
6d58272b PJ |
197 | static struct message orf_type_str[] = |
198 | { | |
199 | { ORF_TYPE_PREFIX, "Prefixlist" }, | |
200 | { ORF_TYPE_PREFIX_OLD, "Prefixlist (old)" }, | |
201 | }; | |
202 | static int orf_type_str_max = sizeof(orf_type_str)/sizeof(orf_type_str[0]); | |
203 | ||
204 | static struct message orf_mode_str[] = | |
205 | { | |
206 | { ORF_MODE_RECEIVE, "Receive" }, | |
207 | { ORF_MODE_SEND, "Send" }, | |
208 | { ORF_MODE_BOTH, "Both" }, | |
209 | }; | |
210 | static int orf_mode_str_max = sizeof(orf_mode_str)/sizeof(orf_mode_str[0]); | |
211 | ||
94f2b392 | 212 | static int |
6d58272b | 213 | bgp_capability_orf_entry (struct peer *peer, struct capability_header *hdr) |
718e3744 | 214 | { |
6d58272b PJ |
215 | struct stream *s = BGP_INPUT (peer); |
216 | struct capability_orf_entry entry; | |
217 | afi_t afi; | |
218 | safi_t safi; | |
718e3744 | 219 | u_char type; |
220 | u_char mode; | |
221 | u_int16_t sm_cap = 0; /* capability send-mode receive */ | |
222 | u_int16_t rm_cap = 0; /* capability receive-mode receive */ | |
223 | int i; | |
224 | ||
6d58272b PJ |
225 | /* ORF Entry header */ |
226 | bgp_capability_mp_data (s, &entry.mpc); | |
227 | entry.num = stream_getc (s); | |
228 | afi = entry.mpc.afi; | |
229 | safi = entry.mpc.safi; | |
230 | ||
718e3744 | 231 | if (BGP_DEBUG (normal, NORMAL)) |
6d58272b PJ |
232 | zlog_debug ("%s ORF Cap entry for afi/safi: %u/%u", |
233 | peer->host, entry.mpc.afi, entry.mpc.safi); | |
718e3744 | 234 | |
235 | /* Check AFI and SAFI. */ | |
6d58272b PJ |
236 | if (!bgp_afi_safi_valid_indices (entry.mpc.afi, &safi)) |
237 | { | |
238 | zlog_info ("%s Addr-family %d/%d not supported." | |
239 | " Ignoring the ORF capability", | |
240 | peer->host, entry.mpc.afi, entry.mpc.safi); | |
241 | return 0; | |
242 | } | |
243 | ||
244 | /* validate number field */ | |
245 | if (sizeof (struct capability_orf_entry) + (entry.num * 2) > hdr->length) | |
718e3744 | 246 | { |
6d58272b PJ |
247 | zlog_info ("%s ORF Capability entry length error," |
248 | " Cap length %u, num %u", | |
249 | peer->host, hdr->length, entry.num); | |
250 | bgp_notify_send (peer, BGP_NOTIFY_CEASE, 0); | |
718e3744 | 251 | return -1; |
252 | } | |
253 | ||
6d58272b | 254 | for (i = 0 ; i < entry.num ; i++) |
718e3744 | 255 | { |
6d58272b PJ |
256 | type = stream_getc(s); |
257 | mode = stream_getc(s); | |
258 | ||
718e3744 | 259 | /* ORF Mode error check */ |
6d58272b PJ |
260 | switch (mode) |
261 | { | |
262 | case ORF_MODE_BOTH: | |
263 | case ORF_MODE_SEND: | |
264 | case ORF_MODE_RECEIVE: | |
265 | break; | |
266 | default: | |
267 | bgp_capability_orf_not_support (peer, afi, safi, type, mode); | |
268 | continue; | |
718e3744 | 269 | } |
6d58272b PJ |
270 | /* ORF Type and afi/safi error checks */ |
271 | /* capcode versus type */ | |
272 | switch (hdr->code) | |
273 | { | |
274 | case CAPABILITY_CODE_ORF: | |
275 | switch (type) | |
276 | { | |
277 | case ORF_TYPE_PREFIX: | |
278 | break; | |
279 | default: | |
280 | bgp_capability_orf_not_support (peer, afi, safi, type, mode); | |
281 | continue; | |
282 | } | |
283 | break; | |
284 | case CAPABILITY_CODE_ORF_OLD: | |
285 | switch (type) | |
286 | { | |
287 | case ORF_TYPE_PREFIX_OLD: | |
288 | break; | |
289 | default: | |
290 | bgp_capability_orf_not_support (peer, afi, safi, type, mode); | |
291 | continue; | |
292 | } | |
293 | break; | |
294 | default: | |
295 | bgp_capability_orf_not_support (peer, afi, safi, type, mode); | |
296 | continue; | |
297 | } | |
298 | ||
299 | /* AFI vs SAFI */ | |
300 | if (!((afi == AFI_IP && safi == SAFI_UNICAST) | |
301 | || (afi == AFI_IP && safi == SAFI_MULTICAST) | |
302 | || (afi == AFI_IP6 && safi == SAFI_UNICAST))) | |
303 | { | |
304 | bgp_capability_orf_not_support (peer, afi, safi, type, mode); | |
305 | continue; | |
306 | } | |
307 | ||
308 | if (BGP_DEBUG (normal, NORMAL)) | |
309 | zlog_debug ("%s OPEN has %s ORF capability" | |
310 | " as %s for afi/safi: %d/%d", | |
311 | peer->host, LOOKUP (orf_type_str, type), | |
312 | LOOKUP (orf_mode_str, mode), | |
313 | entry.mpc.afi, safi); | |
718e3744 | 314 | |
6d58272b | 315 | if (hdr->code == CAPABILITY_CODE_ORF) |
718e3744 | 316 | { |
6d58272b PJ |
317 | sm_cap = PEER_CAP_ORF_PREFIX_SM_RCV; |
318 | rm_cap = PEER_CAP_ORF_PREFIX_RM_RCV; | |
718e3744 | 319 | } |
6d58272b | 320 | else if (hdr->code == CAPABILITY_CODE_ORF_OLD) |
718e3744 | 321 | { |
6d58272b PJ |
322 | sm_cap = PEER_CAP_ORF_PREFIX_SM_OLD_RCV; |
323 | rm_cap = PEER_CAP_ORF_PREFIX_RM_OLD_RCV; | |
718e3744 | 324 | } |
325 | else | |
326 | { | |
327 | bgp_capability_orf_not_support (peer, afi, safi, type, mode); | |
328 | continue; | |
329 | } | |
330 | ||
331 | switch (mode) | |
332 | { | |
333 | case ORF_MODE_BOTH: | |
334 | SET_FLAG (peer->af_cap[afi][safi], sm_cap); | |
335 | SET_FLAG (peer->af_cap[afi][safi], rm_cap); | |
336 | break; | |
337 | case ORF_MODE_SEND: | |
338 | SET_FLAG (peer->af_cap[afi][safi], sm_cap); | |
339 | break; | |
340 | case ORF_MODE_RECEIVE: | |
341 | SET_FLAG (peer->af_cap[afi][safi], rm_cap); | |
342 | break; | |
343 | } | |
344 | } | |
345 | return 0; | |
346 | } | |
347 | ||
94f2b392 | 348 | static int |
6d58272b | 349 | bgp_capability_orf (struct peer *peer, struct capability_header *hdr) |
718e3744 | 350 | { |
6d58272b PJ |
351 | struct stream *s = BGP_INPUT (peer); |
352 | size_t end = stream_get_getp (s) + hdr->length; | |
353 | ||
354 | assert (stream_get_getp(s) + sizeof(struct capability_orf_entry) <= end); | |
355 | ||
356 | /* We must have at least one ORF entry, as the caller has already done | |
357 | * minimum length validation for the capability code - for ORF there must | |
358 | * at least one ORF entry (header and unknown number of pairs of bytes). | |
359 | */ | |
360 | do | |
718e3744 | 361 | { |
6d58272b PJ |
362 | if (bgp_capability_orf_entry (peer, hdr) == -1) |
363 | return -1; | |
364 | } | |
365 | while (stream_get_getp(s) + sizeof(struct capability_orf_entry) < end); | |
366 | ||
367 | return 0; | |
368 | } | |
718e3744 | 369 | |
6d58272b PJ |
370 | static int |
371 | bgp_capability_restart (struct peer *peer, struct capability_header *caphdr) | |
372 | { | |
373 | struct stream *s = BGP_INPUT (peer); | |
374 | u_int16_t restart_flag_time; | |
375 | int restart_bit = 0; | |
376 | size_t end = stream_get_getp (s) + caphdr->length; | |
377 | ||
378 | SET_FLAG (peer->cap, PEER_CAP_RESTART_RCV); | |
379 | restart_flag_time = stream_getw(s); | |
380 | if (CHECK_FLAG (restart_flag_time, RESTART_R_BIT)) | |
381 | restart_bit = 1; | |
382 | UNSET_FLAG (restart_flag_time, 0xF000); | |
383 | peer->v_gr_restart = restart_flag_time; | |
718e3744 | 384 | |
6d58272b PJ |
385 | if (BGP_DEBUG (normal, NORMAL)) |
386 | { | |
387 | zlog_debug ("%s OPEN has Graceful Restart capability", peer->host); | |
388 | zlog_debug ("%s Peer has%srestarted. Restart Time : %d", | |
389 | peer->host, restart_bit ? " " : " not ", | |
390 | peer->v_gr_restart); | |
391 | } | |
718e3744 | 392 | |
6d58272b PJ |
393 | while (stream_get_getp (s) + 4 < end) |
394 | { | |
395 | afi_t afi = stream_getw (s); | |
396 | safi_t safi = stream_getc (s); | |
397 | u_char flag = stream_getc (s); | |
398 | ||
399 | if (!bgp_afi_safi_valid_indices (afi, &safi)) | |
400 | { | |
401 | if (BGP_DEBUG (normal, NORMAL)) | |
402 | zlog_debug ("%s Addr-family %d/%d(afi/safi) not supported." | |
403 | " Ignore the Graceful Restart capability", | |
404 | peer->host, afi, safi); | |
405 | } | |
406 | else if (!peer->afc[afi][safi]) | |
407 | { | |
408 | if (BGP_DEBUG (normal, NORMAL)) | |
409 | zlog_debug ("%s Addr-family %d/%d(afi/safi) not enabled." | |
410 | " Ignore the Graceful Restart capability", | |
411 | peer->host, afi, safi); | |
412 | } | |
413 | else | |
414 | { | |
415 | if (BGP_DEBUG (normal, NORMAL)) | |
416 | zlog_debug ("%s Address family %s is%spreserved", peer->host, | |
417 | afi_safi_print (afi, safi), | |
418 | CHECK_FLAG (peer->af_cap[afi][safi], | |
419 | PEER_CAP_RESTART_AF_PRESERVE_RCV) | |
420 | ? " " : " not "); | |
421 | ||
422 | SET_FLAG (peer->af_cap[afi][safi], PEER_CAP_RESTART_AF_RCV); | |
423 | if (CHECK_FLAG (flag, RESTART_F_BIT)) | |
424 | SET_FLAG (peer->af_cap[afi][safi], PEER_CAP_RESTART_AF_PRESERVE_RCV); | |
425 | ||
426 | } | |
427 | } | |
428 | return 0; | |
429 | } | |
718e3744 | 430 | |
0b2aa3a0 PJ |
431 | static as_t |
432 | bgp_capability_as4 (struct peer *peer, struct capability_header *hdr) | |
433 | { | |
434 | as_t as4 = stream_getl (BGP_INPUT(peer)); | |
435 | ||
436 | if (BGP_DEBUG (as4, AS4)) | |
437 | zlog_debug ("%s [AS4] about to set cap PEER_CAP_AS4_RCV, got as4 %u", | |
438 | peer->host, as4); | |
439 | SET_FLAG (peer->cap, PEER_CAP_AS4_RCV); | |
440 | ||
441 | return as4; | |
442 | } | |
443 | ||
6d58272b PJ |
444 | static struct message capcode_str[] = |
445 | { | |
6d58272b PJ |
446 | { CAPABILITY_CODE_MP, "MultiProtocol Extensions" }, |
447 | { CAPABILITY_CODE_REFRESH, "Route Refresh" }, | |
448 | { CAPABILITY_CODE_ORF, "Cooperative Route Filtering" }, | |
449 | { CAPABILITY_CODE_RESTART, "Graceful Restart" }, | |
450 | { CAPABILITY_CODE_AS4, "4-octet AS number" }, | |
451 | { CAPABILITY_CODE_DYNAMIC, "Dynamic" }, | |
452 | { CAPABILITY_CODE_REFRESH_OLD, "Route Refresh (Old)" }, | |
453 | { CAPABILITY_CODE_ORF_OLD, "ORF (Old)" }, | |
454 | }; | |
455 | int capcode_str_max = sizeof(capcode_str)/sizeof(capcode_str[0]); | |
456 | ||
457 | /* Minimum sizes for length field of each cap (so not inc. the header) */ | |
458 | static size_t cap_minsizes[] = | |
459 | { | |
460 | [CAPABILITY_CODE_MP] = sizeof (struct capability_mp_data), | |
461 | [CAPABILITY_CODE_REFRESH] = CAPABILITY_CODE_REFRESH_LEN, | |
462 | [CAPABILITY_CODE_ORF] = sizeof (struct capability_orf_entry), | |
370b64a2 | 463 | [CAPABILITY_CODE_RESTART] = sizeof (struct capability_gr), |
6d58272b PJ |
464 | [CAPABILITY_CODE_AS4] = CAPABILITY_CODE_AS4_LEN, |
465 | [CAPABILITY_CODE_DYNAMIC] = CAPABILITY_CODE_DYNAMIC_LEN, | |
466 | [CAPABILITY_CODE_REFRESH_OLD] = CAPABILITY_CODE_REFRESH_LEN, | |
467 | [CAPABILITY_CODE_ORF_OLD] = sizeof (struct capability_orf_entry), | |
468 | }; | |
469 | ||
470 | /* Parse given capability. | |
471 | * XXX: This is reading into a stream, but not using stream API | |
472 | */ | |
473 | static int | |
474 | bgp_capability_parse (struct peer *peer, size_t length, u_char **error) | |
475 | { | |
476 | int ret; | |
477 | struct stream *s = BGP_INPUT (peer); | |
478 | size_t end = stream_get_getp (s) + length; | |
479 | ||
480 | assert (STREAM_READABLE (s) >= length); | |
481 | ||
482 | while (stream_get_getp (s) < end) | |
483 | { | |
484 | size_t start; | |
485 | u_char *sp = stream_pnt (s); | |
486 | struct capability_header caphdr; | |
487 | ||
718e3744 | 488 | /* We need at least capability code and capability length. */ |
6d58272b | 489 | if (stream_get_getp(s) + 2 > end) |
718e3744 | 490 | { |
6d58272b | 491 | zlog_info ("%s Capability length error (< header)", peer->host); |
718e3744 | 492 | bgp_notify_send (peer, BGP_NOTIFY_CEASE, 0); |
493 | return -1; | |
494 | } | |
6d58272b PJ |
495 | |
496 | caphdr.code = stream_getc (s); | |
497 | caphdr.length = stream_getc (s); | |
498 | start = stream_get_getp (s); | |
499 | ||
500 | /* Capability length check sanity check. */ | |
501 | if (start + caphdr.length > end) | |
718e3744 | 502 | { |
6d58272b | 503 | zlog_info ("%s Capability length error (< length)", peer->host); |
718e3744 | 504 | bgp_notify_send (peer, BGP_NOTIFY_CEASE, 0); |
505 | return -1; | |
506 | } | |
6d58272b PJ |
507 | |
508 | if (BGP_DEBUG (normal, NORMAL)) | |
509 | zlog_debug ("%s OPEN has %s capability (%u), length %u", | |
510 | peer->host, | |
511 | LOOKUP (capcode_str, caphdr.code), | |
512 | caphdr.code, caphdr.length); | |
513 | ||
514 | /* Length sanity check, type-specific, for known capabilities */ | |
515 | switch (caphdr.code) | |
516 | { | |
517 | case CAPABILITY_CODE_MP: | |
518 | case CAPABILITY_CODE_REFRESH: | |
519 | case CAPABILITY_CODE_REFRESH_OLD: | |
520 | case CAPABILITY_CODE_ORF: | |
521 | case CAPABILITY_CODE_ORF_OLD: | |
522 | case CAPABILITY_CODE_RESTART: | |
0b2aa3a0 | 523 | case CAPABILITY_CODE_AS4: |
6d58272b PJ |
524 | case CAPABILITY_CODE_DYNAMIC: |
525 | /* Check length. */ | |
526 | if (caphdr.length < cap_minsizes[caphdr.code]) | |
527 | { | |
528 | zlog_info ("%s %s Capability length error: got %u," | |
529 | " expected at least %u", | |
530 | peer->host, | |
531 | LOOKUP (capcode_str, caphdr.code), | |
532 | caphdr.length, cap_minsizes[caphdr.code]); | |
533 | bgp_notify_send (peer, BGP_NOTIFY_CEASE, 0); | |
534 | return -1; | |
535 | } | |
536 | /* we deliberately ignore unknown codes, see below */ | |
537 | default: | |
538 | break; | |
539 | } | |
540 | ||
541 | switch (caphdr.code) | |
542 | { | |
543 | case CAPABILITY_CODE_MP: | |
544 | { | |
545 | /* Ignore capability when override-capability is set. */ | |
546 | if (! CHECK_FLAG (peer->flags, PEER_FLAG_OVERRIDE_CAPABILITY)) | |
547 | { | |
548 | /* Set negotiated value. */ | |
549 | ret = bgp_capability_mp (peer, &caphdr); | |
550 | ||
551 | /* Unsupported Capability. */ | |
552 | if (ret < 0) | |
553 | { | |
554 | /* Store return data. */ | |
555 | memcpy (*error, sp, caphdr.length + 2); | |
556 | *error += caphdr.length + 2; | |
557 | } | |
558 | } | |
559 | } | |
560 | break; | |
561 | case CAPABILITY_CODE_REFRESH: | |
562 | case CAPABILITY_CODE_REFRESH_OLD: | |
563 | { | |
564 | /* BGP refresh capability */ | |
565 | if (caphdr.code == CAPABILITY_CODE_REFRESH_OLD) | |
566 | SET_FLAG (peer->cap, PEER_CAP_REFRESH_OLD_RCV); | |
567 | else | |
568 | SET_FLAG (peer->cap, PEER_CAP_REFRESH_NEW_RCV); | |
569 | } | |
570 | break; | |
571 | case CAPABILITY_CODE_ORF: | |
572 | case CAPABILITY_CODE_ORF_OLD: | |
573 | if (bgp_capability_orf (peer, &caphdr)) | |
574 | return -1; | |
575 | break; | |
576 | case CAPABILITY_CODE_RESTART: | |
577 | if (bgp_capability_restart (peer, &caphdr)) | |
578 | return -1; | |
579 | break; | |
580 | case CAPABILITY_CODE_DYNAMIC: | |
581 | SET_FLAG (peer->cap, PEER_CAP_DYNAMIC_RCV); | |
582 | break; | |
0b2aa3a0 PJ |
583 | case CAPABILITY_CODE_AS4: |
584 | /* Already handled as a special-case parsing of the capabilities | |
585 | * at the beginning of OPEN processing. So we care not a jot | |
586 | * for the value really, only error case. | |
587 | */ | |
588 | if (!bgp_capability_as4 (peer, &caphdr)) | |
589 | return -1; | |
590 | break; | |
6d58272b PJ |
591 | default: |
592 | if (caphdr.code > 128) | |
593 | { | |
594 | /* We don't send Notification for unknown vendor specific | |
595 | capabilities. It seems reasonable for now... */ | |
596 | zlog_warn ("%s Vendor specific capability %d", | |
597 | peer->host, caphdr.code); | |
598 | } | |
599 | else | |
600 | { | |
601 | zlog_warn ("%s unrecognized capability code: %d - ignored", | |
602 | peer->host, caphdr.code); | |
603 | memcpy (*error, sp, caphdr.length + 2); | |
604 | *error += caphdr.length + 2; | |
605 | } | |
606 | } | |
607 | if (stream_get_getp(s) != (start + caphdr.length)) | |
608 | { | |
609 | if (stream_get_getp(s) > (start + caphdr.length)) | |
610 | zlog_warn ("%s Cap-parser for %s read past cap-length, %u!", | |
611 | peer->host, LOOKUP (capcode_str, caphdr.code), | |
612 | caphdr.length); | |
613 | stream_set_getp (s, start + caphdr.length); | |
614 | } | |
718e3744 | 615 | } |
616 | return 0; | |
617 | } | |
618 | ||
94f2b392 | 619 | static int |
6d58272b | 620 | bgp_auth_parse (struct peer *peer, size_t length) |
718e3744 | 621 | { |
622 | bgp_notify_send (peer, | |
623 | BGP_NOTIFY_OPEN_ERR, | |
624 | BGP_NOTIFY_OPEN_AUTH_FAILURE); | |
625 | return -1; | |
626 | } | |
627 | ||
94f2b392 | 628 | static int |
718e3744 | 629 | strict_capability_same (struct peer *peer) |
630 | { | |
631 | int i, j; | |
632 | ||
633 | for (i = AFI_IP; i < AFI_MAX; i++) | |
634 | for (j = SAFI_UNICAST; j < SAFI_MAX; j++) | |
635 | if (peer->afc[i][j] != peer->afc_nego[i][j]) | |
636 | return 0; | |
637 | return 1; | |
638 | } | |
639 | ||
0b2aa3a0 PJ |
640 | /* peek into option, stores ASN to *as4 if the AS4 capability was found. |
641 | * Returns 0 if no as4 found, as4cap value otherwise. | |
642 | */ | |
643 | as_t | |
644 | peek_for_as4_capability (struct peer *peer, u_char length) | |
645 | { | |
646 | struct stream *s = BGP_INPUT (peer); | |
647 | size_t orig_getp = stream_get_getp (s); | |
648 | size_t end = orig_getp + length; | |
649 | as_t as4 = 0; | |
650 | ||
651 | /* The full capability parser will better flag the error.. */ | |
652 | if (STREAM_READABLE(s) < length) | |
653 | return 0; | |
654 | ||
655 | if (BGP_DEBUG (as4, AS4)) | |
656 | zlog_info ("%s [AS4] rcv OPEN w/ OPTION parameter len: %u," | |
657 | " peeking for as4", | |
658 | peer->host, length); | |
659 | /* the error cases we DONT handle, we ONLY try to read as4 out of | |
660 | * correctly formatted options. | |
661 | */ | |
662 | while (stream_get_getp(s) < end) | |
663 | { | |
664 | u_char opt_type; | |
665 | u_char opt_length; | |
666 | ||
667 | /* Check the length. */ | |
668 | if (stream_get_getp (s) + 2 > end) | |
669 | goto end; | |
670 | ||
671 | /* Fetch option type and length. */ | |
672 | opt_type = stream_getc (s); | |
673 | opt_length = stream_getc (s); | |
674 | ||
675 | /* Option length check. */ | |
676 | if (stream_get_getp (s) + opt_length > end) | |
677 | goto end; | |
678 | ||
679 | if (opt_type == BGP_OPEN_OPT_CAP) | |
680 | { | |
681 | unsigned long capd_start = stream_get_getp (s); | |
682 | unsigned long capd_end = capd_start + opt_length; | |
683 | ||
684 | assert (capd_end <= end); | |
685 | ||
686 | while (stream_get_getp (s) < capd_end) | |
687 | { | |
688 | struct capability_header hdr; | |
689 | ||
690 | if (stream_get_getp (s) + 2 > capd_end) | |
691 | goto end; | |
692 | ||
693 | hdr.code = stream_getc (s); | |
694 | hdr.length = stream_getc (s); | |
695 | ||
696 | if ((stream_get_getp(s) + hdr.length) > capd_end) | |
697 | goto end; | |
698 | ||
699 | if (hdr.code == CAPABILITY_CODE_AS4) | |
700 | { | |
701 | if (hdr.length != CAPABILITY_CODE_AS4_LEN) | |
702 | goto end; | |
703 | ||
704 | if (BGP_DEBUG (as4, AS4)) | |
705 | zlog_info ("[AS4] found AS4 capability, about to parse"); | |
706 | as4 = bgp_capability_as4 (peer, &hdr); | |
707 | ||
708 | goto end; | |
709 | } | |
710 | stream_forward_getp (s, hdr.length); | |
711 | } | |
712 | } | |
713 | } | |
714 | ||
715 | end: | |
716 | stream_set_getp (s, orig_getp); | |
717 | return as4; | |
718 | } | |
719 | ||
718e3744 | 720 | /* Parse open option */ |
721 | int | |
722 | bgp_open_option_parse (struct peer *peer, u_char length, int *capability) | |
723 | { | |
724 | int ret; | |
718e3744 | 725 | u_char *error; |
726 | u_char error_data[BGP_MAX_PACKET_SIZE]; | |
6d58272b PJ |
727 | struct stream *s = BGP_INPUT(peer); |
728 | size_t end = stream_get_getp (s) + length; | |
718e3744 | 729 | |
730 | ret = 0; | |
718e3744 | 731 | error = error_data; |
732 | ||
733 | if (BGP_DEBUG (normal, NORMAL)) | |
8325cd7f | 734 | zlog_debug ("%s rcv OPEN w/ OPTION parameter len: %u", |
718e3744 | 735 | peer->host, length); |
736 | ||
6d58272b | 737 | while (stream_get_getp(s) < end) |
718e3744 | 738 | { |
6d58272b PJ |
739 | u_char opt_type; |
740 | u_char opt_length; | |
741 | ||
742 | /* Must have at least an OPEN option header */ | |
743 | if (STREAM_READABLE(s) < 2) | |
718e3744 | 744 | { |
745 | zlog_info ("%s Option length error", peer->host); | |
746 | bgp_notify_send (peer, BGP_NOTIFY_CEASE, 0); | |
747 | return -1; | |
748 | } | |
749 | ||
750 | /* Fetch option type and length. */ | |
6d58272b PJ |
751 | opt_type = stream_getc (s); |
752 | opt_length = stream_getc (s); | |
718e3744 | 753 | |
754 | /* Option length check. */ | |
6d58272b | 755 | if (STREAM_READABLE (s) < opt_length) |
718e3744 | 756 | { |
757 | zlog_info ("%s Option length error", peer->host); | |
758 | bgp_notify_send (peer, BGP_NOTIFY_CEASE, 0); | |
759 | return -1; | |
760 | } | |
761 | ||
762 | if (BGP_DEBUG (normal, NORMAL)) | |
8325cd7f | 763 | zlog_debug ("%s rcvd OPEN w/ optional parameter type %u (%s) len %u", |
718e3744 | 764 | peer->host, opt_type, |
765 | opt_type == BGP_OPEN_OPT_AUTH ? "Authentication" : | |
766 | opt_type == BGP_OPEN_OPT_CAP ? "Capability" : "Unknown", | |
767 | opt_length); | |
768 | ||
769 | switch (opt_type) | |
770 | { | |
771 | case BGP_OPEN_OPT_AUTH: | |
6d58272b | 772 | ret = bgp_auth_parse (peer, opt_length); |
718e3744 | 773 | break; |
774 | case BGP_OPEN_OPT_CAP: | |
6d58272b | 775 | ret = bgp_capability_parse (peer, opt_length, &error); |
718e3744 | 776 | *capability = 1; |
777 | break; | |
778 | default: | |
779 | bgp_notify_send (peer, | |
780 | BGP_NOTIFY_OPEN_ERR, | |
781 | BGP_NOTIFY_OPEN_UNSUP_PARAM); | |
782 | ret = -1; | |
783 | break; | |
784 | } | |
785 | ||
786 | /* Parse error. To accumulate all unsupported capability codes, | |
787 | bgp_capability_parse does not return -1 when encounter | |
788 | unsupported capability code. To detect that, please check | |
789 | error and erro_data pointer, like below. */ | |
790 | if (ret < 0) | |
791 | return -1; | |
718e3744 | 792 | } |
793 | ||
794 | /* All OPEN option is parsed. Check capability when strict compare | |
795 | flag is enabled.*/ | |
796 | if (CHECK_FLAG (peer->flags, PEER_FLAG_STRICT_CAP_MATCH)) | |
797 | { | |
798 | /* If Unsupported Capability exists. */ | |
799 | if (error != error_data) | |
800 | { | |
801 | bgp_notify_send_with_data (peer, | |
802 | BGP_NOTIFY_OPEN_ERR, | |
803 | BGP_NOTIFY_OPEN_UNSUP_CAPBL, | |
804 | error_data, error - error_data); | |
805 | return -1; | |
806 | } | |
807 | ||
808 | /* Check local capability does not negotiated with remote | |
809 | peer. */ | |
810 | if (! strict_capability_same (peer)) | |
811 | { | |
812 | bgp_notify_send (peer, | |
813 | BGP_NOTIFY_OPEN_ERR, | |
814 | BGP_NOTIFY_OPEN_UNSUP_CAPBL); | |
815 | return -1; | |
816 | } | |
817 | } | |
818 | ||
819 | /* Check there is no common capability send Unsupported Capability | |
820 | error. */ | |
821 | if (*capability && ! CHECK_FLAG (peer->flags, PEER_FLAG_OVERRIDE_CAPABILITY)) | |
822 | { | |
823 | if (! peer->afc_nego[AFI_IP][SAFI_UNICAST] | |
824 | && ! peer->afc_nego[AFI_IP][SAFI_MULTICAST] | |
825 | && ! peer->afc_nego[AFI_IP][SAFI_MPLS_VPN] | |
826 | && ! peer->afc_nego[AFI_IP6][SAFI_UNICAST] | |
827 | && ! peer->afc_nego[AFI_IP6][SAFI_MULTICAST]) | |
828 | { | |
829 | plog_err (peer->log, "%s [Error] No common capability", peer->host); | |
830 | ||
831 | if (error != error_data) | |
832 | ||
833 | bgp_notify_send_with_data (peer, | |
834 | BGP_NOTIFY_OPEN_ERR, | |
835 | BGP_NOTIFY_OPEN_UNSUP_CAPBL, | |
836 | error_data, error - error_data); | |
837 | else | |
838 | bgp_notify_send (peer, | |
839 | BGP_NOTIFY_OPEN_ERR, | |
840 | BGP_NOTIFY_OPEN_UNSUP_CAPBL); | |
841 | return -1; | |
842 | } | |
843 | } | |
844 | return 0; | |
845 | } | |
846 | ||
94f2b392 | 847 | static void |
718e3744 | 848 | bgp_open_capability_orf (struct stream *s, struct peer *peer, |
849 | afi_t afi, safi_t safi, u_char code) | |
850 | { | |
851 | u_char cap_len; | |
852 | u_char orf_len; | |
853 | unsigned long capp; | |
854 | unsigned long orfp; | |
855 | unsigned long numberp; | |
856 | int number_of_orfs = 0; | |
857 | ||
858 | if (safi == SAFI_MPLS_VPN) | |
859 | safi = BGP_SAFI_VPNV4; | |
860 | ||
861 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
9985f83c | 862 | capp = stream_get_endp (s); /* Set Capability Len Pointer */ |
718e3744 | 863 | stream_putc (s, 0); /* Capability Length */ |
864 | stream_putc (s, code); /* Capability Code */ | |
9985f83c | 865 | orfp = stream_get_endp (s); /* Set ORF Len Pointer */ |
718e3744 | 866 | stream_putc (s, 0); /* ORF Length */ |
867 | stream_putw (s, afi); | |
868 | stream_putc (s, 0); | |
869 | stream_putc (s, safi); | |
9985f83c | 870 | numberp = stream_get_endp (s); /* Set Number Pointer */ |
718e3744 | 871 | stream_putc (s, 0); /* Number of ORFs */ |
872 | ||
873 | /* Address Prefix ORF */ | |
874 | if (CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_SM) | |
875 | || CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_RM)) | |
876 | { | |
877 | stream_putc (s, (code == CAPABILITY_CODE_ORF ? | |
878 | ORF_TYPE_PREFIX : ORF_TYPE_PREFIX_OLD)); | |
879 | ||
880 | if (CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_SM) | |
881 | && CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_RM)) | |
882 | { | |
883 | SET_FLAG (peer->af_cap[afi][safi], PEER_CAP_ORF_PREFIX_SM_ADV); | |
884 | SET_FLAG (peer->af_cap[afi][safi], PEER_CAP_ORF_PREFIX_RM_ADV); | |
885 | stream_putc (s, ORF_MODE_BOTH); | |
886 | } | |
887 | else if (CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_SM)) | |
888 | { | |
889 | SET_FLAG (peer->af_cap[afi][safi], PEER_CAP_ORF_PREFIX_SM_ADV); | |
890 | stream_putc (s, ORF_MODE_SEND); | |
891 | } | |
892 | else | |
893 | { | |
894 | SET_FLAG (peer->af_cap[afi][safi], PEER_CAP_ORF_PREFIX_RM_ADV); | |
895 | stream_putc (s, ORF_MODE_RECEIVE); | |
896 | } | |
897 | number_of_orfs++; | |
898 | } | |
899 | ||
900 | /* Total Number of ORFs. */ | |
901 | stream_putc_at (s, numberp, number_of_orfs); | |
902 | ||
903 | /* Total ORF Len. */ | |
9985f83c | 904 | orf_len = stream_get_endp (s) - orfp - 1; |
718e3744 | 905 | stream_putc_at (s, orfp, orf_len); |
906 | ||
907 | /* Total Capability Len. */ | |
9985f83c | 908 | cap_len = stream_get_endp (s) - capp - 1; |
718e3744 | 909 | stream_putc_at (s, capp, cap_len); |
910 | } | |
911 | ||
912 | /* Fill in capability open option to the packet. */ | |
913 | void | |
914 | bgp_open_capability (struct stream *s, struct peer *peer) | |
915 | { | |
916 | u_char len; | |
917 | unsigned long cp; | |
918 | afi_t afi; | |
919 | safi_t safi; | |
0b2aa3a0 | 920 | as_t local_as; |
718e3744 | 921 | |
922 | /* Remember current pointer for Opt Parm Len. */ | |
9985f83c | 923 | cp = stream_get_endp (s); |
718e3744 | 924 | |
925 | /* Opt Parm Len. */ | |
926 | stream_putc (s, 0); | |
927 | ||
928 | /* Do not send capability. */ | |
929 | if (! CHECK_FLAG (peer->sflags, PEER_STATUS_CAPABILITY_OPEN) | |
930 | || CHECK_FLAG (peer->flags, PEER_FLAG_DONT_CAPABILITY)) | |
931 | return; | |
932 | ||
718e3744 | 933 | /* IPv4 unicast. */ |
934 | if (peer->afc[AFI_IP][SAFI_UNICAST]) | |
935 | { | |
936 | peer->afc_adv[AFI_IP][SAFI_UNICAST] = 1; | |
937 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
938 | stream_putc (s, CAPABILITY_CODE_MP_LEN + 2); | |
939 | stream_putc (s, CAPABILITY_CODE_MP); | |
940 | stream_putc (s, CAPABILITY_CODE_MP_LEN); | |
941 | stream_putw (s, AFI_IP); | |
942 | stream_putc (s, 0); | |
943 | stream_putc (s, SAFI_UNICAST); | |
944 | } | |
945 | /* IPv4 multicast. */ | |
946 | if (peer->afc[AFI_IP][SAFI_MULTICAST]) | |
947 | { | |
948 | peer->afc_adv[AFI_IP][SAFI_MULTICAST] = 1; | |
949 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
950 | stream_putc (s, CAPABILITY_CODE_MP_LEN + 2); | |
951 | stream_putc (s, CAPABILITY_CODE_MP); | |
952 | stream_putc (s, CAPABILITY_CODE_MP_LEN); | |
953 | stream_putw (s, AFI_IP); | |
954 | stream_putc (s, 0); | |
955 | stream_putc (s, SAFI_MULTICAST); | |
956 | } | |
957 | /* IPv4 VPN */ | |
958 | if (peer->afc[AFI_IP][SAFI_MPLS_VPN]) | |
959 | { | |
960 | peer->afc_adv[AFI_IP][SAFI_MPLS_VPN] = 1; | |
961 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
962 | stream_putc (s, CAPABILITY_CODE_MP_LEN + 2); | |
963 | stream_putc (s, CAPABILITY_CODE_MP); | |
964 | stream_putc (s, CAPABILITY_CODE_MP_LEN); | |
965 | stream_putw (s, AFI_IP); | |
966 | stream_putc (s, 0); | |
967 | stream_putc (s, BGP_SAFI_VPNV4); | |
968 | } | |
969 | #ifdef HAVE_IPV6 | |
970 | /* IPv6 unicast. */ | |
971 | if (peer->afc[AFI_IP6][SAFI_UNICAST]) | |
972 | { | |
973 | peer->afc_adv[AFI_IP6][SAFI_UNICAST] = 1; | |
974 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
975 | stream_putc (s, CAPABILITY_CODE_MP_LEN + 2); | |
976 | stream_putc (s, CAPABILITY_CODE_MP); | |
977 | stream_putc (s, CAPABILITY_CODE_MP_LEN); | |
978 | stream_putw (s, AFI_IP6); | |
979 | stream_putc (s, 0); | |
980 | stream_putc (s, SAFI_UNICAST); | |
981 | } | |
982 | /* IPv6 multicast. */ | |
983 | if (peer->afc[AFI_IP6][SAFI_MULTICAST]) | |
984 | { | |
985 | peer->afc_adv[AFI_IP6][SAFI_MULTICAST] = 1; | |
986 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
987 | stream_putc (s, CAPABILITY_CODE_MP_LEN + 2); | |
988 | stream_putc (s, CAPABILITY_CODE_MP); | |
989 | stream_putc (s, CAPABILITY_CODE_MP_LEN); | |
990 | stream_putw (s, AFI_IP6); | |
991 | stream_putc (s, 0); | |
992 | stream_putc (s, SAFI_MULTICAST); | |
993 | } | |
994 | #endif /* HAVE_IPV6 */ | |
995 | ||
996 | /* Route refresh. */ | |
c9502438 | 997 | SET_FLAG (peer->cap, PEER_CAP_REFRESH_ADV); |
998 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
999 | stream_putc (s, CAPABILITY_CODE_REFRESH_LEN + 2); | |
1000 | stream_putc (s, CAPABILITY_CODE_REFRESH_OLD); | |
1001 | stream_putc (s, CAPABILITY_CODE_REFRESH_LEN); | |
1002 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
1003 | stream_putc (s, CAPABILITY_CODE_REFRESH_LEN + 2); | |
1004 | stream_putc (s, CAPABILITY_CODE_REFRESH); | |
1005 | stream_putc (s, CAPABILITY_CODE_REFRESH_LEN); | |
718e3744 | 1006 | |
0b2aa3a0 PJ |
1007 | /* AS4 */ |
1008 | SET_FLAG (peer->cap, PEER_CAP_AS4_ADV); | |
1009 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
1010 | stream_putc (s, CAPABILITY_CODE_AS4_LEN + 2); | |
1011 | stream_putc (s, CAPABILITY_CODE_AS4); | |
1012 | stream_putc (s, CAPABILITY_CODE_AS4_LEN); | |
1013 | if ( peer->change_local_as ) | |
1014 | local_as = peer->change_local_as; | |
1015 | else | |
1016 | local_as = peer->local_as; | |
1017 | stream_putl (s, local_as ); | |
1018 | ||
718e3744 | 1019 | /* ORF capability. */ |
1020 | for (afi = AFI_IP ; afi < AFI_MAX ; afi++) | |
1021 | for (safi = SAFI_UNICAST ; safi < SAFI_MAX ; safi++) | |
1022 | if (CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_SM) | |
1023 | || CHECK_FLAG (peer->af_flags[afi][safi], PEER_FLAG_ORF_PREFIX_RM)) | |
1024 | { | |
1025 | bgp_open_capability_orf (s, peer, afi, safi, CAPABILITY_CODE_ORF_OLD); | |
1026 | bgp_open_capability_orf (s, peer, afi, safi, CAPABILITY_CODE_ORF); | |
1027 | } | |
1028 | ||
1029 | /* Dynamic capability. */ | |
1030 | if (CHECK_FLAG (peer->flags, PEER_FLAG_DYNAMIC_CAPABILITY)) | |
1031 | { | |
1032 | SET_FLAG (peer->cap, PEER_CAP_DYNAMIC_ADV); | |
1033 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
1034 | stream_putc (s, CAPABILITY_CODE_DYNAMIC_LEN + 2); | |
1035 | stream_putc (s, CAPABILITY_CODE_DYNAMIC); | |
1036 | stream_putc (s, CAPABILITY_CODE_DYNAMIC_LEN); | |
1037 | } | |
1038 | ||
538621f2 | 1039 | /* Graceful restart capability */ |
1040 | if (bgp_flag_check (peer->bgp, BGP_FLAG_GRACEFUL_RESTART)) | |
1041 | { | |
1042 | SET_FLAG (peer->cap, PEER_CAP_RESTART_ADV); | |
1043 | stream_putc (s, BGP_OPEN_OPT_CAP); | |
1044 | stream_putc (s, CAPABILITY_CODE_RESTART_LEN + 2); | |
1045 | stream_putc (s, CAPABILITY_CODE_RESTART); | |
1046 | stream_putc (s, CAPABILITY_CODE_RESTART_LEN); | |
1047 | stream_putw (s, peer->bgp->restart_time); | |
1048 | } | |
1049 | ||
718e3744 | 1050 | /* Total Opt Parm Len. */ |
9985f83c | 1051 | len = stream_get_endp (s) - cp - 1; |
718e3744 | 1052 | stream_putc_at (s, cp, len); |
1053 | } |