pfSense » pfSense Packages

We can confirm this also on our 2.7 Upgrade which broke FRR from starting (although I think its somthing to do with the new FRR package though instead of pfsense core itself)

[2.7.0-RELEASE][root@pfsense]/root: /usr/local/sbin/zebra -d -M snmp
loading module "snmp" failed: Shared object "snmp" not found, required by "zebra" 

Even though we have the modules on the machine

[2.7.0-RELEASE][root@pfsense]/root: pkg info -l frr7 | grep snmp
    /usr/local/lib/frr/modules/bgpd_snmp.so
    /usr/local/lib/frr/modules/ospf6d_snmp.so
    /usr/local/lib/frr/modules/ospfd_snmp.so
    /usr/local/lib/frr/modules/ripd_snmp.so
    /usr/local/lib/frr/modules/zebra_snmp.so
    /usr/local/lib/libfrrsnmp.a
    /usr/local/lib/libfrrsnmp.so
    /usr/local/lib/libfrrsnmp.so.0
    /usr/local/lib/libfrrsnmp.so.0.0.0

For those hitting this error, do you have the NET-SNMP package installed and active?

The AgentX integration is intended for use with that package and wouldn't work without it.

If it works with NET-SNMP installed then FRR should just detect that case and not try to use it when it's not there.

If it doesn't work even when NET-SNMP is installed, then the AgentX integration is broken somehow and should maybe be removed if it can't be repaired.

Jim Pingle wrote in #note-3:

For those hitting this error, do you have the NET-SNMP package installed and active?

The AgentX integration is intended for use with that package and wouldn't work without it.

If it works with NET-SNMP installed then FRR should just detect that case and not try to use it when it's not there.

If it doesn't work even when NET-SNMP is installed, then the AgentX integration is broken somehow and should maybe be removed if it can't be repaired.

For us when we upgraded from 2.60 to 2.7 we did in fact have `net-snmp` packages installed before and after the upgrade (and continued to work fine too for us) while having the above described failure.

We did not try a fresh 2.70 install, so cant not comment on this.

The FRR package is built with SNMP support but it doesn't appear to be loading the module somehow.

The vtysh CLI lists "agentx" as a valid command but trying to enter it in vtysh results in an error saying it is an unknown command. Searching on that error says that the daemons aren't loading the module, however, I tried a few different ways to load the module (e.g. zebra -d -M snmp) but none succeeded. They all produce an error saying the module cannot be found, even when the relevant .so files are in place in /usr/local/lib/frr/modules/.

I see this issue is now assigned, just for reference here are some probably heavily related tickets:

https://github.com/FRRouting/frr/issues/14875
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275252
https://github.com/opnsense/ports/issues/179
https://redmine.pfsense.org/issues/14491#change-68711

All ultimately say "upstream fault" and the FRR guys claim that its user issue with lacking libs :(

I really hope someone will be able to see what has been missing in the FRR package/setup to enable snmp/agentx support

Found a use case for AgentX and ran into the frr start.

Jim - i see the target versions have been deleted. Does that mean this wont be investigated?

Mike Moore wrote in #note-10:

Found a use case for AgentX and ran into the frr start.

Jim - i see the target versions have been deleted. Does that mean this wont be investigated?

It's a package, it doesn't need to be tied to a release.

Confirming that agentx still does not work with FRR. It looks like OPNSense has a workaround and the FRR ticket has been closed.

https://github.com/opnsense/ports/commit/126d79725a

As Reggie Walters referenced in #note-13, AgentX support in FRR remains non-functional. It appears OPNsense has addressed this by ensuring the package is compiled using GNU sed to fix symbol linking issues, as seen in this commit: https://github.com/opnsense/ports/commit/126d79725a

Currently, it is impossible to enable AgentX on pfSense Plus 25.07.1. Attempting to load the SNMP module fails with an "Undefined symbol" error, indicating that libfrrsnmp.so was not correctly linked against Net-SNMP during the build process.

# /usr/local/sbin/bgpd -A 127.0.0.1 -F traditional -M snmp -C
frr_init: loader error: dlopen(/usr/local/lib/frr/modules/bgpd_snmp.so): /usr/local/lib/libfrrsnmp.so.0: Undefined symbol "netsnmp_enable_subagent" 
frr_init: loader error: dlopen(/usr/local/lib/frr/modules/snmp.so): Cannot open "/usr/local/lib/frr/modules/snmp.so" 
frr_init: loader error: dlopen(snmp): Shared object "snmp" not found, required by "bgpd" 

From a quick look at the upstream issue it seems this has been fixed with newer FRR versions. It's worth testing this again in pfSense+ 25.11 which now has FRR10.

As soon as i saw your post, i just went ahead and tried and it doesnt work. As soon as you enable AgenxX , FRR will not start

2025-12-17 16:10:24.178369-05:00 syslogd - sendto: Connection refused
2025-12-17 16:10:16.499204-05:00 staticd 33339 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:10:16.421966-05:00 mgmtd 32888 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:01
2025-12-17 16:10:16.419783-05:00 syslogd - sendto: Connection refused
2025-12-17 16:10:01.608339-05:00 php 7117 /usr/local/sbin/acbupload.php: Completed AutoConfigBackup encrypted configuration backup upload to https://acb.netgate.com (success)
2025-12-17 16:10:01.109913-05:00 php 7117 /usr/local/sbin/acbupload.php: Starting upload of staged AutoConfigBackup encrypted configuration backups to https://acb.netgate.com
2025-12-17 16:10:00.010249-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:58.734148-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:57.717357-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:47.502081-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:27.832267-05:00 mgmtd 32888 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:27.812242-05:00 staticd 33339 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:27.504385-05:00 root 61594 /usr/local/etc/rc.d/frr: WARNING: failed to start ospfd
2025-12-17 16:09:27.161053-05:00 mgmtd 32888 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:27.134422-05:00 staticd 33339 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:26.819675-05:00 root 50466 /usr/local/etc/rc.d/frr: WARNING: failed to start ospfd
2025-12-17 16:09:26.192661-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:23.670075-05:00 staticd 33339 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:23.440509-05:00 root 34317 /usr/local/etc/rc.d/frr: WARNING: failed to start ospfd
2025-12-17 16:09:18.373729-05:00 mgmtd 20597 [J2RAS-MZ95C] Terminating on signal
2025-12-17 16:09:17.276873-05:00 mgmtd 20597 [X3G8F-PM93W] BE-adapter: mgmt_msg_read: got EOF/disconnect
2025-12-17 16:09:17.276509-05:00 staticd 21390 [MRN6F-AYZC4] Terminating on signal
2025-12-17 16:09:17.234729-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:15.819466-05:00 php-fpm 12680 FRR Package: FRR: Restarting services.
2025-12-17 16:09:15.818540-05:00 php-fpm 12680 FRR Package: FRR: Daemon state: zebra: running | mgmtd: running | staticd: running | ospfd: stopped
2025-12-17 16:09:15.732715-05:00 php-fpm 12680 FRR Package: FRR: Rebuild configuration.
2025-12-17 16:09:15.731945-05:00 php-fpm 12680 FRR Package: FRR BFDd: BFD disabled.
2025-12-17 16:09:15.731838-05:00 php-fpm 12680 FRR Package: FRR RIPd: No config data found.
2025-12-17 16:09:15.731644-05:00 php-fpm 12680 FRR Package: FRR OSPF6d: No config data found.
2025-12-17 16:09:15.731120-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:15.730528-05:00 php-fpm 12680 FRR Package: FRR BGPd: BGP disabled.
2025-12-17 16:09:14.116329-05:00 php-fpm 12680 /pkg_edit.php: Staging AutoConfigBackup encrypted configuration backup for deferred upload to https://acb.netgate.com
2025-12-17 16:09:14.114328-05:00 check_reload_status 662 Syncing firewall
2025-12-17 16:09:13.610770-05:00 php-fpm 12680 /pkg_edit.php: Configuration Change: admin@104.13.92.128 (Local Database): FRR: changed OSPF
2025-12-17 16:09:13.079985-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:08.566797-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:06.518873-05:00 syslogd - sendto: Connection refused
2025-12-17 16:09:06.053415-05:00 staticd 21390 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:05.912596-05:00 mgmtd 20597 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:09:01.995774-05:00 php 94430 /usr/local/sbin/acbupload.php: Completed AutoConfigBackup encrypted configuration backup upload to https://acb.netgate.com (success)
2025-12-17 16:09:01.429453-05:00 php 94430 /usr/local/sbin/acbupload.php: Starting upload of staged AutoConfigBackup encrypted configuration backups to https://acb.netgate.com
2025-12-17 16:08:59.716218-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:59.640156-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:59.545744-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:50.911528-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:16.942260-05:00 staticd 21390 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:08:16.899904-05:00 mgmtd 20597 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:08:16.723895-05:00 root 46064 /usr/local/etc/rc.d/frr: WARNING: failed to start ospfd
2025-12-17 16:08:16.375807-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:16.375211-05:00 mgmtd 20597 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:08:16.363074-05:00 staticd 21390 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:08:16.126487-05:00 root 35061 /usr/local/etc/rc.d/frr: WARNING: failed to start ospfd
2025-12-17 16:08:13.058812-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:13.056257-05:00 root 22756 /usr/local/etc/rc.d/frr: WARNING: failed to start ospfd
2025-12-17 16:08:08.830450-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:07.627354-05:00 mgmtd 84170 [J2RAS-MZ95C] Terminating on signal
2025-12-17 16:08:06.535355-05:00 mgmtd 84170 [X3G8F-PM93W] BE-adapter: mgmt_msg_read: got EOF/disconnect
2025-12-17 16:08:06.535021-05:00 staticd 85479 [MRN6F-AYZC4] Terminating on signal
2025-12-17 16:08:06.409595-05:00 syslogd - sendto: Connection refused
2025-12-17 16:08:04.650485-05:00 staticd 85479 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:08:04.467532-05:00 mgmtd 84170 [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
2025-12-17 16:08:03.924129-05:00 php-fpm 10922 FRR Package: FRR: Restarting services.
2025-12-17 16:08:03.916944-05:00 php-fpm 10922 FRR Package: FRR: Rebuild configuration.
2025-12-17 16:08:03.916161-05:00 php-fpm 10922 FRR Package: FRR BFDd: BFD disabled.
2025-12-17 16:08:03.916047-05:00 php-fpm 10922 FRR Package: FRR RIPd: No config data found.
2025-12-17 16:08:03.915846-05:00 php-fpm 10922 FRR Package: FRR OSPF6d: No config data found.
2025-12-17 16:08:03.914460-05:00 php-fpm 10922 FRR Package: FRR BGPd: BGP disabled.

Hello Mike,

Have you changed the socket permissions for net-snmp? You need to use net-snmp and disable the snmpd daemon.
https://redmine.pfsense.org/issues/11610#note-5

It's another "bug" affecting the current ticket

Got the updated package. If you enable AgentX it does work now and FRR starts, Routing starts, all is good. The problem is that there isnt any MIBs related to this.
I did a whole walk and the branches i have are the following:

iso.3.6.1.2.1.1 = System MIB
iso.3.6.1.2.1.2 = Interfaces MIB
iso.3.6.1.2.1.4 = IP MIB
iso.3.6.1.2.1.6 = TCP MIB
iso.3.6.1.2.1.7 = UDP MIB
iso.3.6.1.2.1.25 = HOST-RESOURCES MIB
iso.3.6.1.2.1.31 = IF-MIB Extensions
iso.3.6.1.2.1.55 = IP Forward MIB
iso.3.6.1.2.1.56 = IPv6 MIB
iso.3.6.1.2.1.88 = DISMAN-EVENT-MIB
iso.3.6.1.2.1.92 = NOTIFICATION-LOG-MIB

I am running OSPF
AgentX is in the frr.conf file now.

[25.11-RELEASE][admin@Hestia.moore.lan]/root: vtysh

Hello, this is FRRouting (version 10.5.0).
Copyright 1996-2005 Kunihiro Ishiguro, et al.

Hestia.moore.lan# sh running-config
Building configuration...

Current configuration:
!
frr version 10.5.0
frr defaults traditional
hostname Hestia.moore.lan
log syslog
agentx
service integrated-vtysh-config
!

I found the problem........AgentX is not connecting. Package is incomplete.

<28>1 2025-12-18T14:46:06.605622-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:06.951878-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:21.605667-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:21.952784-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:36.612479-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:36.953729-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:51.622972-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:46:51.964574-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:06.626522-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:07.022268-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:21.626992-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:22.035856-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:36.628040-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:37.046117-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:51.636018-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:47:52.060101-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:48:06.642665-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:48:07.065905-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:48:21.656364-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:48:22.076707-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:48:36.668066-05:00 Hestia.moore.lan zebra 90157 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
<28>1 2025-12-18T14:48:37.090721-05:00 Hestia.moore.lan ospfd 91700 - - [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
[25.11-RELEASE][admin@Hestia.moore.lan]/var/log: