cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
30273
Views
0
Helpful
5
Replies

BGP hold time expired

ShankL
Level 1
Level 1

when BGP neighborship flaps or goes down I do see below logs sometimes 

sent to neighbor (hold time expired)

received from neighbor (hold time expired)

 

I would like to know difference between them . if possible please also explain me when a router will sent or receive this notification and with this can we identify which router is having problem. 

5 Replies 5

balaji.bandi
Hall of Fame
Hall of Fame

The main mechanism BGP uses to make sure neighbors are still alive is using the hold time and KEEPALIVE messages. The hold time specifies how long a router will wait for incoming BGP messages before it assumes the neighbor is dead. When a router has no UPDATE messages to send, it periodically sends KEEPALIVE messages, which, well, keep the BGP session alive.

 

The default value for the hold time suggested in the BGP specification (RFC 4271) is 90 seconds, and keepalives should be sent at intervals of one third the hold time (30 seconds). However, Cisco uses defaults of 180 and 60 seconds. So when two Cisco routers have established a BGP session and exchanged prefixes, 60 seconds later they’ll each send a KEEPALIVE message. Upon reception of the keepalive by the other router, that router’s hold time for the session will have counted down from 180 to 120, but it now gets reinitialized to 180. This continues every 60 seconds. However, should router A lose power, then router B won’t see any keepalives. So after 180 seconds, router B decides that router A is dead, sends a NOTIFICATION message and tears down the session.

 

In this case we do not know which one having issue, you need to do step by step diagnosis. between device right from connectivity.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hello


@ShankL wrote:

 

sent to neighbor (hold time expired)

received from neighbor (hold time expired)

I would like to know difference between them .


 

You would see
sent notification on both routers if the network path between the bgp peers fails
or
sent notification on the router that has a failed interface or loses connection to it advertised peering address and a received notification  on its bgp neighbor


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

I am sorry to say this I am still not clear with your answer. could you please elaborate more on this? please also explain with me an example if possible.

when we will see Received notification in the routers log ?

Hello jaishankar,

>> when we will see Received notification in the routers log ?

When the other router BGP peer has not received three BGP keepalives in a row from your router and the BGP hold time failed on their side then it will send you a BGP notification with reason BGP hold time expired the BGP notification message closes the BGP connection and the two peers can start a new BGP session.

 

Hope to help

Giuseppe