<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"Arial Black";
panose-1:2 11 10 4 2 1 2 2 2 4;}
@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word"><div dir="auto">Hello!<br><br>On first sight this looks like Fortinet ignoring the packets. Maybe (wild guess) you have a firewall rule in place dropping them in the Fortinet?<br><br>Maria</div><br><br><div class="gmail_quote"><div dir="auto">On 7 June 2024 21:51:28 CEST, LIU Chris via Bird-users <bird-users@network.cz> wrote:</div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<p style="font-family:Arial Black;font-size:10pt;color:#DBE5F1;margin:5pt;font-style:normal;font-weight:normal;text-decoration:none;" align="Left">
Classified as: {Hitachi Rail – Public}<br>
</p>
<br>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">My setup :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Linux running bird</span><span lang="ZH-CN" style="font-size:11.0pt;font-family:DengXian">，</span><span lang="ZH-CN" style="font-size:11.0pt">
</span><span style="font-size:11.0pt">Peer: Fortinet Firewall<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">In bird, configure bfd as below:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">protocol bfd BFD_SD_01 {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> interface "*" {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> min rx interval 1000000 us;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> min tx interval 1000000 us;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> idle tx interval 1000000 ums;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> multiplier 3;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> };<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> neighbor 192.168.0.1 local 192.168.0.2;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">}<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><br>
</span><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Fortinet side, biasally same, also set rx intrva: 1000 ms, tx interval: 1000ms, multiplier: 3<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">However, both side show bfd DOWN</span><span lang="ZH-CN" style="font-size:10.0pt;font-family:DengXian;color:#1F497D">。</span><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Catpure tcpdump in Fortinet side, Fortinet IP: 192.168.0.1<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black"> Time source destination protocol info<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">1 0.000000 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">6 0.756375 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">11 1.519796 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">14 2.351177 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">19 3.225686 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">24 3.852938 192.168.0.1 192.168.0.2 BFD Control Diag: Control Detection Time Expired, State: Down, Flags: 0x00<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Arial",sans-serif;color:black">25 3.981126 192.168.0.2 192.168.0.1 BFD Control Diag: No Diagnostic, State: Down, Flags: 0x00</span><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">from Fortinet neighbour information, it seems cannot receive control message from Peer, why? I don't have any block
port. Why get detection time: 1500ms after neighboation <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Below is fortinet bfd neighbor information<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">OurAddress NeighAddress State Interface LDesc/RDesc<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">192.168.0.1 192.168.0.2 DOWN STN2-SD-A 1/0/M<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Local Diag: 1, Demand mode: no, Poll bit: unset<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">MinTxInt: 1000, MinRxInt: 1000, Multiplier: 3<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;background:yellow;mso-highlight:yellow">Received: MinRxInt: 0 (ms), MinTxInt: 0 (ms), Multiplier: 3</span><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Transmit Interval: 6500 (ms),
<span style="background:yellow;mso-highlight:yellow">Detection Time: 1500 (ms)</span><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Rx Count: 0, Rx Interval; (ms) min/max/avg 0/0/0<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Tx Count: 10287, Tx Interval (ms) min/max/avg 5000/5030/5000, last: 2350 (ms) ago<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Registered protocols: Static BGP<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Is this bird issue or fortinet? I suspect 80% caused by Fortiet, but I just want to get some suggestion/proposal from
bird expert.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">With Best Regards,<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-CA" style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Chris LIU<o:p></o:p></span></p>
</div>
<div>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<p align="center" style="margin:5.0pt;text-align:center"><span style="font-size:10.0pt;font-family:"Arial Black",sans-serif;color:#DBE5F1">Hitachi Rail – Public<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<br>
<p style="font-family:Arial Black;font-size:10pt;color:#DBE5F1;margin:5pt;font-style:normal;font-weight:normal;text-decoration:none;" align="Center">
{Hitachi Rail – Public}<br>
</p>
</blockquote></div><div dir="auto"><div class='k9mail-signature'>-- <br>Maria Matejka (she/her) | BIRD Team Leader | CZ.NIC, z.s.p.o.</div></div></body>
</html>