pfSense » pfSense Packages

Viktor Gurov wrote:

Unable to reproduce with FRR pkg 1.1.0_8 -
frr starts successfully with the "Enable agentx" option:
[...]

I have just updated to version 1.1.0_8 of FRR and still having the same issue

When GLOBAL SETTINGS "Enable Agent X" is enabled, in CLI I get:

/bin/sh /usr/local/etc/rc.d/frr.sh restart
 ...
Performing intergrated config test
Starting FRR
Checking intergrated config...
Checking vtysh.conf
OK
Starting zebra.
2021/03/16 10:47:47 ZEBRA: [EC 4043309111] Disabling MPLS support (no kernel support)
Starting staticd.
Starting bgpd.
Booting for integrated-vtysh-config...

% [BGP] Unknown command: agentx

line 11: Failure to communicate[2] to bgpd, line: agentx

Configuration file[/var/etc/frr/frr.conf] processing failure: 2
Starting watchfrr

when its NOT enabled

/bin/sh /usr/local/etc/rc.d/frr.sh restart
 ...
Performing intergrated config test
Starting FRR
Checking intergrated config...
Checking vtysh.conf
OK
Starting zebra.
2021/03/16 10:57:25 ZEBRA: [EC 4043309111] Disabling MPLS support (no kernel support)
Starting staticd.
Starting bgpd.
Booting for integrated-vtysh-config...
Starting watchfrr

As you see the difference and the error

I think the issue is somewhere in here /usr/local/pkg/frr.inc

in the segment as follows:

        /* SNMP */
        foreach ($config_key_daemons as $config_key => $daemon) {
                $frr_daemon_modules[$daemon[0]] = '';

                if ($config['installedpackages'][$config_key]['config'][0]['enablesnmpagentx']) {
                        $frr_daemon_modules[$daemon[0]] .= ' -M snmp';
                }
        }

Since its trying to start a daemon that might not support the -M snmp params? thats just a gut feelings though, I could be wrong

Found the issue,

net-snmp is the issue since it sets the agentx file with permissions that could not be accessed by FRR hence FRR crashes.

The fix is to go Services -> SNMP (net-snmp) -> General -> Advance Options

and add

agentxperms 777 777