Page MenuHomeVyOS Platform
Create Task
Maniphest T9606

frr: ospf_auth_check_md5_digest bad sequence xx (expect > xx) after upgrade to FRR 10.7
Open, NormalPublicBUG
Actions

Description

Nov 10 09:22:25 ospfd[2503]: [EC 134217740] interface eth2:xxx.yyy.94.21: ospf_auth_check_md5_digest bad sequence 1793325513 (expect > 1793325513), Router-ID: xxx.yyy.95.93
Nov 10 09:22:30 ospfd[2503]: [EC 134217740] interface eth2:xxx.yyy.94.21: ospf_auth_check_md5_digest bad sequence 1793325518 (expect > 1793325518), Router-ID: xxx.yyy.95.93

https://github.com/FRRouting/frr/commit/330442fca5c8686a23faca26e3c4635d72a23721 changed the MD5/HMAC sequence-number check from > to >=, so ospfd now drops every packet whose sequence number repeats the last accepted one. The upstream fix is the no compatible rfc7474 switch under router ospf (stable/10.7 commit b5f5261514, PR #23956).

Upgrade FRR in rolling and expose CLI know for this changing behavior. Keep already existing behavior by setting no compatible rfc7474 per default.

Details

Version
rolling-2026-11-10
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

c-po created this task.Tue, Nov 10, 5:30 PM
c-po renamed this task from frr: ospf_auth_check_md5_digest bad sequence 1793325513 (expect > 1793325513) after upgrade to FRR 10.7 to frr: ospf_auth_check_md5_digest bad sequence xx (expect > xx) after upgrade to FRR 10.7.
c-po claimed this task.
c-po triaged this task as Normal priority.
master subscribed.Tue, Nov 10, 5:35 PM
pasik subscribed.Tue, Nov 10, 6:57 PM