bird BFD is DOWN

[Maria Matejka]

Hello!

On first sight this looks like Fortinet ignoring the packets. Maybe (wild guess) you have a firewall rule in place dropping them in the Fortinet?

Maria

On 7 June 2024 21:51:28 CEST, LIU Chris via Bird-users <bird-users at network.cz> wrote:
>Classified as: {Hitachi Rail – Public}
>
>My setup :
>Linux running bird， Peer:  Fortinet Firewall
>
>In bird, configure bfd as below:
>
>protocol bfd BFD_SD_01 {
>                interface "*" {
>                               min rx interval 1000000 us;
>                               min tx interval 1000000 us;
>                              idle tx interval 1000000 ums;
>                              multiplier 3;
>                };
>                neighbor 192.168.0.1 local 192.168.0.2;
>}
>
>Fortinet side, biasally same, also set rx intrva: 1000 ms, tx interval: 1000ms,  multiplier: 3
>However, both side show bfd DOWN。
>Catpure tcpdump in Fortinet side,  Fortinet IP: 192.168.0.1
>   Time     source      destination protocol    info
>1  0.000000 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00
>6  0.756375 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00
>11 1.519796 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00
>14 2.351177 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00
>19 3.225686 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00
>24 3.852938 192.168.0.1 192.168.0.2 BFD Control Diag: Control Detection Time Expired, State: Down, Flags: 0x00
>25 3.981126 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00
>
>from Fortinet neighbour information, it seems cannot receive control message from Peer, why? I don't have any block port. Why get detection time: 1500ms after neighboation
>Below is fortinet bfd neighbor information
>OurAddress NeighAddress State Interface LDesc/RDesc
>192.168.0.1 192.168.0.2 DOWN STN2-SD-A 1/0/M
>Local Diag: 1, Demand mode: no, Poll bit: unset
>MinTxInt: 1000, MinRxInt: 1000, Multiplier: 3
>Received: MinRxInt: 0 (ms), MinTxInt: 0 (ms), Multiplier: 3
>Transmit Interval: 6500 (ms), Detection Time: 1500 (ms)
>Rx Count: 0, Rx Interval; (ms) min/max/avg 0/0/0
>Tx Count: 10287, Tx Interval (ms) min/max/avg 5000/5030/5000, last: 2350 (ms) ago
>Registered protocols: Static BGP
>
>Is this bird issue or fortinet?  I suspect 80% caused by Fortiet, but I just want to get some suggestion/proposal from bird expert.
>
>With Best Regards,
>Chris LIU
>
>Hitachi Rail – Public
>
>
>{Hitachi Rail – Public}

-- 
Maria Matejka (she/her) | BIRD Team Leader | CZ.NIC, z.s.p.o.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://trubka.network.cz/pipermail/bird-users/attachments/20240608/6e808b80/attachment.htm>