BGP reset event

[tedauction]

Hello, we had a WAN circuit outage for 15 minutes. Our service provider said nothing was wrong at their end and advised us to check our router.

I am trying to understand what may have caused BGP to drop for this 25 minute period. Do these logs suggest the problem was on our router or the service providers ?

Thanks for any help.

Jun 6 10:55:53: %BGP-3-NOTIFICATION: sent to neighbor 192.168.2.25 4/0 (hold time expired) 0 bytes
Jun 6 10:55:53: %BGP-5-NBR_RESET: Neighbor 192.168.2.25 reset (BGP Notification sent)
Jun 6 10:55:53: %BGP-5-ADJCHANGE: neighbor 192.168.2.25 Down BGP Notification s ent
Jun 6 10:55:53: %BGP_SESSION-5-ADJCHANGE: neighbor 192.168.2.25 IPv4 Unicast to pology base removed from session BGP Notification sent
Jun 6 11:20:11: %BGP-5-ADJCHANGE: neighbor 192.168.2.25 Up

[Jon Marshall]

Not a lot you can tell from this.

What you can say is that your router stopped receiving keepalives and then the hold time expired so the adjacency went down.

So it lost connectivity to it's neighbor but that does not tell you that much.

Presumably there is nothing in your logs about interfaces going down ?

Jon

[tedauction]

Thanks Jon, no nothing about interfaces going down in the logs. That is all there is.

The service provider says it was not their fault. My router seems good, so no idea what caused this 25 minute outage.

[Julio E. Moisa · Accepted solution]

Hi

You can execute: 

show ip bgp neighbor <neighbor IP>  , It can show some information about the latest events. 

Also during the outages you can verify the bgp peering status to have an idea about the problem, executing:

show ip bgp summary

You will see: idle or active. Also you can check the interfaces to detect any alert or errors. 

I have had similar situations with ISP's hehehe.

Hope it is useful

:-)

[cofee]

You can also check for any crc errors on the wan interface if you haven't cleared the counters.