07-30-2019 12:28 AM
when BGP neighborship flaps or goes down I do see below logs sometimes
sent to neighbor (hold time expired)
received from neighbor (hold time expired)
I would like to know difference between them . if possible please also explain me when a router will sent or receive this notification and with this can we identify which router is having problem.
07-30-2019 12:41 AM
The main mechanism BGP uses to make sure neighbors are still alive is using the hold time and KEEPALIVE messages. The hold time specifies how long a router will wait for incoming BGP messages before it assumes the neighbor is dead. When a router has no UPDATE messages to send, it periodically sends KEEPALIVE messages, which, well, keep the BGP session alive.
The default value for the hold time suggested in the BGP specification (RFC 4271) is 90 seconds, and keepalives should be sent at intervals of one third the hold time (30 seconds). However, Cisco uses defaults of 180 and 60 seconds. So when two Cisco routers have established a BGP session and exchanged prefixes, 60 seconds later they’ll each send a KEEPALIVE message. Upon reception of the keepalive by the other router, that router’s hold time for the session will have counted down from 180 to 120, but it now gets reinitialized to 180. This continues every 60 seconds. However, should router A lose power, then router B won’t see any keepalives. So after 180 seconds, router B decides that router A is dead, sends a NOTIFICATION message and tears down the session.
In this case we do not know which one having issue, you need to do step by step diagnosis. between device right from connectivity.
07-30-2019 01:26 AM
Hello
@ShankL wrote:
sent to neighbor (hold time expired)
received from neighbor (hold time expired)
I would like to know difference between them .
You would see
- sent notification on both routers if the network path between the bgp peers fails
or
- sent notification on the router that has a failed interface or loses connection to it advertised peering address and a received notification on its bgp neighbor
08-01-2019 09:46 PM
I am sorry to say this I am still not clear with your answer. could you please elaborate more on this? please also explain with me an example if possible.
08-01-2019 09:49 PM
when we will see Received notification in the routers log ?
08-01-2019 11:46 PM
Hello jaishankar,
>> when we will see Received notification in the routers log ?
When the other router BGP peer has not received three BGP keepalives in a row from your router and the BGP hold time failed on their side then it will send you a BGP notification with reason BGP hold time expired the BGP notification message closes the BGP connection and the two peers can start a new BGP session.
Hope to help
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide