Hello, I am running BIRD 1.4.0 on an Ubuntu linux machine which peers BGP successfully with a Juniper SRX firewall. I am having difficulties getting BFD past the Init state. See below for both BIRD and SRX config and logs. It appears as though the firewall is not receiving the BFD messages. I have confirmed that there are no access control restrictions for BFD hitting the SRX (host-inbound-traffic as well as loopback filter). I have already adjusted the Linux source port selection with: sysctl -w net.ipv4.ip_local_port_range="49152 65535" I am sure its something basic, troubleshooting suggestions appreciated. Thanks, Tom. // bird.conf protocol bfd { interface "172.30.6.8/32" { interval 1000 ms; multiplier 3; }; } protocol bgp iBGP_1 { .... neighbor 172.30.6.1 as z; source address 172.30.6.8; .... bfd; .... } // bird host $ sudo ip addr show eth0 | grep inet inet 172.30.6.8/24 brd 172.30.6.255 scope global eth0 $ sudo birdc show bfd session BIRD 1.4.0 ready. bfd1: IP address Interface State Since Interval Timeout 172.30.6.1 --- Init 05:27:46 1.000 3.000 $ sudo tcpdump -i eth0 udp port 3784 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 05:47:35.873663 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:36.642025 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:37.521546 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:38.349886 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:53:19.824960 IP (tos 0xc0, ttl 255, id 16504, offset 0, flags [none], proto UDP (17), length 52) srx-host.49152 > bird-host.3784: BFDv1, length: 24 Control, State Down, Flags: [none], Diagnostic: No Diagnostic (0x00) Detection Timer Multiplier: 3 (3000 ms Detection time), BFD Length: 24 My Discriminator: 0x0000000f, Your Discriminator: 0x00000000 Desired min Tx Interval: 1000 ms Required min Rx Interval: 1000 ms Required min Echo Interval: 0 ms $ sudo tail -f /var/log/bird.log | grep bfd 2014-11-27 05:27:42 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] 2014-11-27 05:27:46 <TRACE> bfd1: Session to 172.30.6.1 changed state from Down to Init 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] // juniper firewall set protocols bgp group X bfd-liveness-detection minimum-interval 1000 set security zones security-zone X interfaces reth2.106 host-inbound-traffic protocols bfd
show bfd session Detect Transmit Address State Interface Time Interval Multiplier 172.30.6.8 Down reth2.106 0.000 1.000 3 172.30.6.9 Down reth2.106 0.000 1.000 3
2 sessions, 2 clients Cumulative transmit rate 2.0 pps, cumulative receive rate 0.0 pps // traceoptions Nov 27 16:25:23.540758 Initiated BFD session to peer 172.30.6.8 (Internal AS 65000): address=172.30.6.8 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:25:27.562265 Initiated BFD session to peer 172.30.6.9 (Internal AS 65000): address=172.30.6.9 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:26:59.795599 Terminated BFD session to peer 172.30.6.8 (Internal AS 65000) (Closing) Nov 27 16:26:59.798422 Terminated BFD session to peer 172.30.6.9 (Internal AS 65000) (Closing) Nov 27 16:27:31.810248 Initiated BFD session to peer 172.30.6.8 (Internal AS 65000): address=172.30.6.8 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:27:35.811656 Initiated BFD session to peer 172.30.6.9 (Internal AS 65000): address=172.30.6.9 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255