Security

 View Only
  • 1.  srx340 : problem with peer bgp

    Posted 03-30-2024 01:38

    Hello

    i have srx340 , have a problem with neigbor bgp 

    show bgp neighbor 192.168.78.4 
    Peer: 192.168.78.4 AS 65426    Local: 192.168.78.3 AS 65011
      Group: eBGP-VPN-Internet     Routing-Instance: VPN-Internet
      Forwarding routing-instance: VPN-Internet  
      Type: External    State: Active         Flags: <>***************************************************
      Last State: Idle          Last Event: Start
      Last Error: Cease********************************************************************************************
      Export: [ EXPORT-eBGP-VPN-Internet ] Import: [ IMPORT-eBGP-VPN-Internet ]
      Options: <Preference AddressFamily PeerAS Refresh>
      Options: <BfdEnabled>
      Options: <GracefulShutdownRcv>
      Address families configured: inet-unicast
      Holdtime: 90 Preference: 170
      Graceful Shutdown Receiver local-preference: 0
      Number of flaps: 2
      Last flap event: Stop
      Error: 'Cease' Sent: 2 Recv: 0

    what is problem exact and  what is other command show can help expert to check more with me ?

    i wait a reply from expert security and newtork

    best regards



    ------------------------------
    Dhikra Marghli
    ------------------------------


  • 2.  RE: srx340 : problem with peer bgp

    Posted 8 days ago

    Without a config snipet it is hard to say, state "Active" means it is trying to establish TCP connection  on Port 179

    1) do below 

    run ping 192.168.78.4 routing-instance VPN-Internet 

    Can you ping neighbour?

    2) Is your zone allowed to receive BGP traffic?

    show configuration security zones security-zone [ZONE_NAME]

    3) Are your AS matching with peer?

    -------------------------------------------