Improve company productivity with a Business Account.Sign Up

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1453
  • Last Modified:

BGP Drops every 90 to 120 seconds


I'm having a major issue with my ISP. We just turned on BGP this past friday and I'm having intermittent ping loss on my /24 block that I am advertising.  The techies can't seem to figure out why! Here is the result of "show ip bgp neighbor "

GP neighbor is 63.X.X.X,  remote AS 1, external link
  BGP version 4, remote router ID 137.X.X.X
  BGP state = Established, up for 00:00:34
  Last read 00:00:04, last write 00:00:06, hold time is 90, keepalive interval is 30 seconds
  Neighbor capabilities:
    Route refresh: advertised and received(old & new)
    Address family IPv4 Unicast: advertised and received
  Message statistics:
    InQ depth is 0
    OutQ depth is 0
                         Sent       Rcvd
    Opens:               1791       1791
    Notifications:          0       1784
    Updates:             3570       1791
    Keepalives:         10827      10827
    Route Refresh:          0          0
    Total:              16188      16193
  Default minimum time between advertisement runs is 30 seconds

Here is a part of my config:
router bgp 13XXX
 no synchronization
 bgp log-neighbor-changes
 network 63.X.X.0 mask
 neighbor 63.X.X.177 remote-as 1
 neighbor 151.X.X.53 remote-as 2
 no auto-summary

Any ideas on what might cause? If I do a TRACE on 63.X.X.178 (s0/1/0.500) it takes forever.
  • 5
  • 3
1 Solution
What type of connection do you have to your ISP? Cehck for input/output drops on the peering interface.
Did you open a troulble ticket with your ISP?

How and where are you verifying that t here is packet loss?

harbor235 ;}
njmattAuthor Commented:
Yes I have opened a ticket with my ISP, but they are "doing research"

I have two T1's. One BGP session remains up with no problems. The other ISP does not. If I ping the /24 block it will be good for a while from some remote sites, and doesn't work at all from other remote sites. It's VERY random. This is probably due to the unreliable routes being published by the problematic ISP.

Is there a command that will give info on the drop and reconnect? I
njmattAuthor Commented:
Last reset 00:01:23, due to BGP Notification received, hold time expired
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

There are many reasons a BGP session can go down, physical link, resource depleteion, etc ....

show inerface <your_interface>   ; this will give you input/output drops, checksum errors etc ..

harbor235 ;}
njmattAuthor Commented:
After some testing, Ive discovered the following:

FYI: S0/0/0 (151.X.X.53, ASN#1)  BGP functions and routes fine
S0/1/0.500 (63.X.X.178, ASN#2)  BGP Drops every 2 minutes as long as the firewall (zone-member security out-zone) is on S0/1/0.500
If we MOVE zone-member security out-zone from s0/1/0.500 to s0/1/0 the BGP connection to ASN#2 stays up (my question here is: does that firewall function on the .500 interface in this configuration?)


If zone-member security is on S0/1/0 and S0/0/0 (working BGP session) is shut ASN 701 will be learned and a route will be entered into the routing table. I can ping anywhere from the router, but LAN Internet access does not work.

If zone-member security is on S0/1/0.500 and S0/0/0 (working BGP session) is shut ASN#2 will be learned and a route will be entered into the routing table. I can ping anywhere from the router, and LAN Internet access DOES work, but the connection drops every 2 minutes. During the up-time all functions are seemingly perfect. The second I plug in S0/0/0 (151.X.X.53) and it initiates BGP, the S0/1/0.500 (63.X.X.178) is removed from the routing table and will NOT return unless the other interface (S0/0/0) is shut. If I were to shut S0/0/0 (151.X.X.53) the route returns.

As you can see, it seems that the zone-member firewall is preventing the BGP connection to ASN#2 from staying up, but that doesnt explain why the other ISP is unaffected by the same firewall.
njmattAuthor Commented:
point increase
Can you provide a diagram detailing what your arvhitecture looks like?

Does BGP reset or are the routes being withdrawn?

You need to provide some log messages and more information, i.,e the interface stats from my earlier post.

show interface <BGP peer interface>

harbor235 ;"
njmattAuthor Commented:
Well cisco helped me out. They had me add a few things to my zone-based policy firewall, but we still were restricted to one BGP connection. We had to add this access-list:
access-list 150 permit tcp any any eq bgp
access-list 150 permit tcp any eq bgp any

Anyways. I don't know much about BGP since this is my first time using it, but I don't know why BGP is only adding one route to the routing table at a time. If I shut one interface, the other takes over. I changed the weights and that didn't seem to do much. How can I get both external routes to show up in the routing table? See here:

#show ip route
Gateway of last resort is to network is variably subnetted, 2 subnets, 2 masks
S       63.X.X.0/24 is directly connected, FastEthernet0/0
C       63.X.X.176/30 is directly connected, Serial0/1/0.500
     151.X.X.0/30 is subnetted, 1 subnets
C       151.X.X.52 is directly connected, Serial0/0/0
C is directly connected, FastEthernet0/0
B* [20/0] via 151.X.X.53, 00:02:32

#show ip bgp  
BGP table version is 31, local router ID is
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

   Network          Next Hop            Metric LocPrf Weight Path
*          63.X.X.177             0           100 ASN1 i
*>                   0           200 ASN2 i
*> 63.X.X.0/24                  0         32768 i

Closed, 500 points refunded.
Community Support Moderator
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now