Wednesday, January 17, 2018

Random BGP Flap

Hi all - seem to be having an issue with BGP session terminating arbitrarily. It doesn't seem to occur at any specific time, but the messages below always precede the peer reset. From my understanding, the ISP seems to be sending a community and/or attribute that my router cannot understand, causing a reset.

Am I missing anything? ISP swears everything on their end is beautiful and working wondrously.

ARS BGP>show ip bgp summary

BGP router identifier W.W.W.W, local AS number 330XX

BGP table version is 343

2 BGP AS-PATH entries

0 BGP community entries

 

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

Y.Y.Y.Y 4 407YY 3732625 43874 343 0 0 00:05:35 1

 

Total number of neighbors 1

 

ARS BGP>show ip bgp neighbor

BGP neighbor is Y.Y.Y.Y, remote AS 407YY, local AS 330XX, external link

BGP version 4, remote router ID Z.Z.Z.Z

BGP state = Established, up for 00:05:35

Last read 00:05:35, hold time is 90, keepalive interval is 30 seconds

Neighbor capabilities:

Route refresh: advertised and received (old and new)

Address family IPv4 Unicast: advertised and received

Received 3732625 messages, 0 notifications, 0 in queue

Sent 43531 messages, 343 notifications, 0 in queue

Route refresh request: received 0, sent 0

Minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast

BGP table version 343, neighbor version 343

Index 1, Offset 0, Mask 0x2

Community attribute sent to this neighbor (both)

Inbound path policy configured

Outbound path policy configured

Incoming update prefix filter list is *default

Outgoing update AS path filter list is *1

1 accepted prefixes

1 announced prefixes

 

Connections established 344; dropped 343

Local host: X.X.X.X, Local port: 56939

Foreign host: Y.Y.Y.Y, Foreign port: 179

Nexthop: X.X.X.X

Nexthop global: fe80::c0ea:e4ff:fe91:18b5

Nexthop local: ::

BGP connection: non shared network

Last Reset: 00:05:41, due to BGP Notification sent

Notification Error Message: (UPDATE Message Error/Malformed Attribute List.)

 

Syslog:

 

BGP:Y.Y.Y.Y-Outgoing [DECODE] Open Cap: unrecognized capability code 64 len 2

BGP:Y.Y.Y.Y-Outgoing [DECODE] Attr Comm: Flag(D0) ! (Optional && Transitive)

TCP connection dropped X.X.X.X, 55157, X9 Y.Y.Y.Y, 179, X9 tcp

For Legibility:

X.X.X.X is our IP Y.Y.Y.Y is ISP BGP neighbor IP.

Thanks!



No comments:

Post a Comment