[c-nsp] Continous BGP session resets on SRD3

[John van Oppen]

We saw this issue about 8 hours ago too...   It appeared to affect GSRs running anything older than gsr-k4p-mz.120-32.SY9.bin as well as 7200s running non-current versions of IOS.      Our 6500s were all fine but they are all running at least s72033-adventerprisek9_wan-mz.122-33.SXI1.bin.

This sure looked like it was tickling CSCeh13489 but we already limit the maximum AS-path length to well-under 255 and that did not seem to protect us.   We ended up doing an emergency upgrade of the GSRs involved.


John van Oppen
Spectrum Networks
Direct: 206-973-8302
Main: 206-973-8300

________________________________________
From: cisco-nsp-bounces at puck.nether.net [cisco-nsp-bounces at puck.nether.net] on behalf of Kostas Fotiadis [kostas.fotiadis at oteglobe.net]
Sent: Wednesday, June 16, 2010 4:41 AM
To: Gordon Bezzina
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Continous BGP session resets on SRD3

Hi Gordon,

Just hang-up the phone with TAC.
We also had the same issue this morning.
One session was iBGP and the other eBGP.
Engineer said, undocumented bug, needs to do more research and get back
to be.
Don't know what he did and fix it. I guess you need to open a case...

Good luck,
Kostas


On 16/6/2010 12:37 μμ, Gordon Bezzina wrote:
> Hi,
>
> Since this morning I am experiencing a weird problem on one of my full feeds
> link.
> My router is a 7606 with dual RSP720-3CXL-GE and running SRD3.
>
> I have a multihop bgp peer to get the full bgp feed from my customer.
>
> Suddenly this morning the connection started flapping. With the following
> error message:
>
> Jun 16 07:40:03 CEST: %BGP-5-ADJCHANGE: neighbor W.X.Y.Z vpn vrf XX Up
> Jun 16 07:42:36 CEST: %BGP-5-ADJCHANGE: neighbor W.X.Y.Z vpn vrf XX Down BGP
> Notification sent
> Jun 16 07:42:36 CEST: %BGP-3-NOTIFICATION: sent to neighbor W.X.Y.Z 3/4
> (invalid flags for attribute) 3 bytes 000000
> 15w6d: BGP: 217.15.96.9 Bad attributes
> Jun 16 07:42:36 CEST: %BGP-4-MSGDUMP: unsupported or mal-formatted message
> received from W.X.Y.Z:
> FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 012B 0200 0001 1040 0101 02C0 119A
> 0226
> 0000 3D77 0000 22E0 0000 04F9 0000 3065 0003 0065 0003 0065 0000 C288 0000
> 22E4
> 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000
> 22E4
> 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000
> 22E4
> 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000
> 22E4
> 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 0000 22E4 4002 4E02 263D
> 7722
> E004 F930 655B A05B A0C2 8822 E422 E422 E422 E422 E422 E422 E422 E422 E422
> E422
>
> Jun 16 07:42:42 CEST: %BGP_SESSION-5-ADJCHANGE: neighbor W.X.Y.Z IPv4
> Unicast vpn vrf XX topology base removed from session  BGP Notification sent
>
> The sequence is as follows:
> It basically goes up, starts getting the feed, then at around 290K routes it
> logs this error and resets the session. It will
> Then start over again.
>
> Note that this does not seem to be the route dampening issue - I do not even
> have dampening enabled on my router.
>
> Also mls cef is set at 350K for IPv4 and free RAM is over 1G
>
> Any ideas?
>
> Thanks/Regards
> Gordon
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/