[c-nsp] Re : BFD on ASR 9000

[chams]

Hi,

My firewall is using bfd and when typing "show bfd session" on it, it shows me 
down sessions

concerning my ebgp connection, it's a non-multihop connection.

here is my bgp configuration :
 
neighbor X.X.X.X
  remote-as 252
  use neighbor-group NG-PE-CE
  bfd fast-detect
  bfd multiplier 3
  bfd minimum-interval 300


and here is the "show bfd client", (i'm using bfd for my ISIS configuration)

Name            Node       Num sessions  
--------------- ---------- --------------
MPLS-TE         0/RSP0/CPU 3             
bgp-0           0/RSP0/CPU 0             
bgp-0           0/RSP1/CPU 0             
ipv4_static     0/RSP0/CPU 0             
ipv4_static     0/RSP1/CPU 0             
isis-IGP-MPLS   0/RSP0/CPU 3             
isis-IGP-MPLS   0/RSP1/CPU 0             
pim             0/RSP0/CPU 3             
pim             0/RSP1/CPU 0             
rsvp            0/RSP0/CPU 0             
rsvp            0/RSP1/CPU 0          


thanks.


----- Message d'origine ----
De : Marc Binderberger <marc at sniff.de>
À : Gert Doering <gert at greenie.muc.de>
Cc : chams <chams_b at yahoo.fr>; cisco-nsp at puck.nether.net
Envoyé le : Mar 1 février 2011, 13h 42min 16s
Objet : Re: [c-nsp] BFD on ASR 9000


Hello Gerd and Chams,

> My guess is that your unnamed firewall doesn't do BFD...

that is problem #2  ;-) - but it still should show up with "show bfd session"
on the ASR9k as a DOWN session.

The eBGP session must be non-multihop, i.e. it must be between the
addresses of the link ASR9k--FW. I assume this is what you mean
with point-to-point?

BFD really doesn't know anything about "i" or "e"-BGP. All it requires
is a "bfd fast-detect" line under the BGP neighbor.

What is "show bfd client" showing?


Regards, Marc



> On Tue, Feb 01, 2011 at 10:31:10AM +0000, chams wrote:
> > I have to configure a bfd session between my ASR and a Firewall, over a BGP 
> > session.
> > but after configuration i ca't even see the configured session when doing a 
> > "show bfd session".
> > by  reading some cisco docs, i've seen that BFD can be configured onlu on  
>point 
>
> > to point eBGP session, my ASR and Firewall have an eBGP point to  point 
>session 
>
> > but they belong to the same confederation (perhaps BFD see  it as iBGP 
>session)
> 
> My guess is that your unnamed firewall doesn't do BFD...
> 
> gert
> -- 
> USENET is *not* the non-clickable part of WWW!
>                                                            //www.muc.de/~gert/
> Gert Doering - Munich, Germany                            gert at greenie.muc.de
> fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de



> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

-- 
Marc Binderberger        <marc at sniff.de>        Powered by *BSD ;-)