Page MenuHomeVyOS Platform

enforce-first-as should be explicitly unset in FRR unless explicity set in Vyos
In progress, HighPublicBUG

Description

Problem: FRR defaults to 'enforce-first-as' but Vyos assumes the opposite (aligning with Juniper). Usual use case for turning this off is when connecting to Route Servers.

Backport from Rolling:

--- bgpd.frr.j2
+++ /usr/share/vyos/templates/frr/bgpd.frr.j2
@@ -93,8 +93,10 @@
 {% if config.enforce_first_as is vyos_defined %}
  neighbor {{ neighbor }} enforce-first-as
+{% else %}
+ no neighbor {{ neighbor }} enforce-first-as
 {% endif %}
 {% if config.strict_capability_match is vyos_defined %}

Details

Version
2025.11
Is it a breaking change?
Config syntax change (migratable)
Issue type
Bug (incorrect behavior)