hi folks,
I encountered a strange thing, when I'm starting to configure route-map to filter BGP updates I'm receiving errors and neighbourship down.
here is my log messages:
Jul 27 13:03:47: %BGP-3-NOTIFICATION: received from neighbor ISP2 active 2/5 (authentication failure) 0 bytes
xxx-1-R4451-R12U(config)#
Jul 27 13:03:47: %BGP-5-NBR_RESET: Neighbor ISP2 active reset (BGP Notification received)
Jul 27 13:03:47: %BGP-5-ADJCHANGE: neighbor ISP2 active Down BGP Notification received
Jul 27 13:03:47: %BGP_SESSION-5-ADJCHANGE: neighbor ISP2 IPv4 Unicast topology base removed from session BGP Notification received
xxx-1-R4451-R12U(config)#
Jul 27 13:03:57: %BGP-3-NOTIFICATION: received from neighbor ISP2 active 2/5 (authentication failure) 0 bytes
xxx-1-R4451-R12U(config)#
Jul 27 13:03:57: %BGP-5-NBR_RESET: Neighbor ISP2 active reset (BGP Notification received)
Jul 27 13:03:57: %BGP-5-ADJCHANGE: neighbor ISP2 active Down BGP Notification received
Jul 27 13:03:57: %BGP_SESSION-5-ADJCHANGE: neighbor ISP2 IPv4 Unicast topology base removed from session BGP Notification received
and so on until I cancel my route-map line. and here is my BGP config:
router bgp yyy
bgp router-id my-AS-id
bgp log-neighbor-changes
network my-AS
neighbor ISP2 remote-as ISP2
neighbor ISP2 description ISP2
neighbor ISP2 send-community
neighbor ISP2 soft-reconfiguration inbound
neighbor ISP2 route-map ISP2-IN in
neighbor ISP2 route-map ISP2-OUT out
neighbor ISP1 remote-as ISP1
neighbor ISP1 description ISP2
neighbor ISP1 ebgp-multihop 3
neighbor ISP1 timers 30 90
neighbor ISP1 send-community
neighbor ISP1 soft-reconfiguration inbound
neighbor ISP1 weight 1000
neighbor ISP1 route-map ISP1-IN in
neighbor ISP1 route-map ISP1-OUT out
!
!
ip prefix-list BOGONS description bogus-nets
ip prefix-list BOGONS seq 15 permit 0.0.0.0/8 le 32
ip prefix-list BOGONS seq 20 permit 127.0.0.0/8 le 32
ip prefix-list BOGONS seq 30 permit 10.0.0.0/8 le 32
ip prefix-list BOGONS seq 35 permit 172.16.0.0/12 le 32
ip prefix-list BOGONS seq 40 permit 192.168.0.0/16 le 32
ip prefix-list BOGONS seq 45 permit 169.254.0.0/16 le 32
ip prefix-list BOGONS seq 50 permit 224.0.0.0/4 le 32
ip prefix-list BOGONS seq 55 permit 240.0.0.0/4 le 32
!
ip prefix-list DEFAULT description default-route
ip prefix-list DEFAULT seq 10 permit 0.0.0.0/0
!
ip prefix-list OUR-AS-OUT description allow-our-AS-exact
ip prefix-list OUR-AS-OUT seq 10 permit my-AS/24
!
ip prefix-list OUR-CIDR-BLOCKS description deny-our-AS-redistribute-in
ip prefix-list OUR-CIDR-BLOCKS seq 5 permit my-AS/24 le 32
!
route-map ISP1-IN deny 110
match ip address prefix-list BOGONS
!
route-map ISP1-IN deny 115
match ip address prefix-list DEFAULT
!
route-map ISP1-IN deny 120
match ip address prefix-list OUR-CIDR-BLOCKS
!
route-map ISP1-IN permit 200
!
route-map ISP2-OUT permit 100
match ip address prefix-list OUR-AS-OUT
!
route-map ISP2-OUT deny 200
!
route-map ISP2-IN deny 110
match ip address prefix-list BOGONS
!
route-map ISP2-IN deny 115
match ip address prefix-list DEFAULT
!
route-map ISP2-IN deny 120
match ip address prefix-list OUR-CIDR-BLOCKS
!
route-map ISP2-IN permit 200
!
route-map ISP1-OUT permit 100
match ip address prefix-list OUR-AS-OUT
!
route-map ISP1-OUT deny 200
and I'm trying to insert line:
route-map ISP2 permit 80
after inserting I receive those log messages, after cancelling this line those messages stop in 4-5 minutes.
thanks in advance!
