topic Re: BGP peeering in Next-Generation Firewall Discussions

BGP peeering

wael.Hedhli — Thu, 27 Jul 2023 08:53:38 GMT

Trying to setup a Two BGP session with 2 separate routers that provide internet access.
The 3 devices (PA, router1 and router2) share the same network 10.9.9.0/25.
BGP session 1 : PA <--> Router1
BGP Session 2: PA <--> Router2
the two sessions seems working fine when activating them individually, however when trying to establish the 2 sessions simultanialsty, one of them is stuck in active/openconfirm
I can't figure it out

Re: BGP peeering

ozheng — Thu, 27 Jul 2023 11:28:47 GMT

Hello Wael.Hedhli,

OpenConfirm State:

      In this state, BGP waits for a KEEPALIVE or NOTIFICATION message.

From RFC4271.

Maybe you can check on the peer side for some information.

From the firewall side, I think you can set a packet capture on tcp/179 (tx/rx/drop).

And make sure there is no drop capture (that means no packet dropped by the firewall).

Olivier