bgpd: Fix `enforce-first-as` per peer-group removal

If we do `no neighbor PG enforce-first-as`, it wasn't working because the flag
was inherited incorrectly for the members of the peer-group.

Fixes: 322462920e2a2c8b73191c6eb5157d64cf4a593e ("bgpd: Enable enforce-first-as by default")
Closes: https://github.com/FRRouting/frr/issues/17702
Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>

diff --git a/bgpd/bgp_vty.c b/bgpd/bgp_vty.c
index 8e29e90c7d91ae4b6de3c13610c1b3d98f2e1cfd..27f50a8854970408892620da9cc63e5fdcda8530 100644 (file)
--- a/bgpd/bgp_vty.c
+++ b/bgpd/bgp_vty.c
@@ -18634,7 +18634,11 @@ static void bgp_config_write_peer_global(struct vty *vty, struct bgp *bgp,
 
        /* enforce-first-as */
        if (CHECK_FLAG(bgp->flags, BGP_FLAG_ENFORCE_FIRST_AS)) {
-               if (!peergroup_flag_check(peer, PEER_FLAG_ENFORCE_FIRST_AS))
+               /* The `no` form is printed because by default this enforcing
+                * is enabled, thus we need to print it inverted.
+                * See peer_new().
+                */
+               if (peergroup_flag_check(peer, PEER_FLAG_ENFORCE_FIRST_AS))
                        vty_out(vty, " no neighbor %s enforce-first-as\n", addr);
        } else {
                if (peergroup_flag_check(peer, PEER_FLAG_ENFORCE_FIRST_AS))

diff --git a/bgpd/bgpd.c b/bgpd/bgpd.c
index c53f4965cc931174e54ccbae9c60e696221badce..1a9fb2ef6330f3ff965e269b0010b72c55e66ac6 100644 (file)
--- a/bgpd/bgpd.c
+++ b/bgpd/bgpd.c
@@ -1568,8 +1568,13 @@ struct peer *peer_new(struct bgp *bgp)
 
        SET_FLAG(peer->sflags, PEER_STATUS_CAPABILITY_OPEN);
 
-       if (CHECK_FLAG(bgp->flags, BGP_FLAG_ENFORCE_FIRST_AS))
-               peer_flag_set(peer, PEER_FLAG_ENFORCE_FIRST_AS);
+       /* By default this is enabled, thus we need to mark it as
+        * inverted in order to display correctly in the configuration.
+        */
+       if (CHECK_FLAG(bgp->flags, BGP_FLAG_ENFORCE_FIRST_AS)) {
+               SET_FLAG(peer->flags_invert, PEER_FLAG_ENFORCE_FIRST_AS);
+               SET_FLAG(peer->flags, PEER_FLAG_ENFORCE_FIRST_AS);
+       }
 
        if (CHECK_FLAG(bgp->flags, BGP_FLAG_SOFT_VERSION_CAPABILITY))
                peer_flag_set(peer, PEER_FLAG_CAPABILITY_SOFT_VERSION);