01-30-2016 09:45 AM - edited 03-05-2019 06:59 AM
All, wonder if you can help as seeing the BGP fail between routers
Log Buffer (16384 bytes):
Writing current configuration to 212.137.2.20
Jan 13 11:51:13.267: %BGP-5-ADJCHANGE: neighbor 172.31.235.121 Down BGP Notification sent
Jan 13 11:51:13.267: %BGP-3-NOTIFICATION: sent to neighbor 172.31.235.121 4/0 (hold time expired) 0 bytes
Jan 13 11:51:13.271: %BGP_SESSION-5-ADJCHANGE: neighbor 172.31.235.121 IPv4 Unicast topology base removed from session BGP Notification sent
Jan 13 11:51:13.335: %TCP-6-BADAUTH: No MD5 digest from 172.31.235.121(179) to 172.31.235.122(12406) (RST)
Jan 13 11:51:13.335: %TCP-6-BADAUTH: No MD5 digest from 172.31.235.121(179) to 172.31.235.122(12406) (RST)
Jan 13 11:51:14.011: %TRACKING-5-STATE: 8 ip route 195.27.67.96/28 reachability Up->Down
Jan 13 11:51:14.011: %TRACKING-5-STATE: 4 ip route 204.71.124.0/24 reachability Up->Down
Jan 13 11:51:14.011: %TRACKING-5-STATE: 6 ip route 212.137.2.0/27 reachability Up->Down
Jan 13 11:51:14.011: %TRACKING-5-STATE: 7 ip route 212.137.2.32/27 reachability Up->Down
Jan 13 11:51:14.011: %TRACKING-5-STATE: 100 list boolean or Up->Down
Jan 13 11:51:16.583: %HSRP-5-STATECHANGE: GigabitEthernet0/1 Grp 1 state Active -> Speak
Jan 13 11:51:18.779: %BGP-5-ADJCHANGE: neighbor 172.31.235.121 Up
01-30-2016 09:58 AM
Hello,
It looks like the router 172.31.235.122 was configured to use a password in the BGP peering with 172.31.235.121, but 172.31.235.121 is not configured with a password in this BGP peering.
Can you first confirm a working connectivity between 172.31.235.122 and 172.31.235.121? Next, can you confirm that both these routers are configured with the same BGP password?
Best regards,
Peter
01-30-2016 11:35 AM
Wonderful thank you Peter, i'll check the connectivity and then the confirm the password. Will advise if this has worked.
Thank you once again.
01-30-2016 11:49 AM
02-06-2016 09:37 AM
Hello,
To be honest, I am confused as well.
Is there perhaps a firewall or a device running some kind of TCP interception between your router and the peer 172.31.235.121? Alternatively, is it possible that this BGP peering uses the IP address of a HSRP group as its update source/destination at either end?
The notification message - hold time expired - is fairly straightforward: The neighbor has not been heard from in due time, usually 3 minutes. Therefore, I believe we should focus strongly on the IP connectivity between you and the BGP peer and all factors that can impact it.
Best regards,
Peter
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide