Looking to create internal sensors for BGP for testing (IBGP)

Hi Team,

I am looking to create some IBGP sessions for internal sensor testing I have imported the MIB files successfully into PRTG but my session is staying in an idle state though using the remote peer sensor and local address shows the correct values.

I wondered if I am missing something with my config on the router side I would be happy to outline what is set in the config and can provide the syntax used.

Any Assistance would be greatly appreciated

Can you ping the neighbor?
Share your config for bgp.

I can ping the neighbour fine as they are on the same LAN segment

set interfaces bridge br4040 address ‘10.95.10.1/24’
set interfaces bridge br4040 aging ‘300’
set interfaces bridge br4040 hello-time ‘2’
set interfaces bridge br4040 max-age ‘20’
set interfaces bridge br4040 priority ‘32768’
set interfaces bridge br4040 stp ‘false’
set interfaces ethernet eth4 hw-id ‘00:15:5d:02:20:09’
set interfaces ethernet eth8 address ‘10.90.10.70/24’
set interfaces ethernet eth8 description ‘Dev VLAN’
set interfaces ethernet eth8 duplex ‘auto’
set interfaces ethernet eth8 hw-id ‘00:1d:d8:b7:1c:08’
set interfaces ethernet eth8 smp-affinity ‘auto’
set interfaces ethernet eth8 speed ‘auto’
set interfaces ethernet eth9 bridge-group bridge ‘br4040’
set interfaces ethernet eth9 description ‘Server-VLAN-4040’
set interfaces ethernet eth9 duplex ‘auto’
set interfaces ethernet eth9 hw-id ‘00:1d:d8:b7:1c:06’
set interfaces ethernet eth9 smp-affinity ‘auto’
set interfaces ethernet eth9 speed ‘auto’
set interfaces ethernet eth10 duplex ‘auto’
set interfaces ethernet eth10 hw-id ‘00:1d:d8:b7:1c:04’
set interfaces ethernet eth10 smp-affinity ‘auto’
set interfaces ethernet eth10 speed ‘auto’
set interfaces ethernet eth11 duplex ‘auto’
set interfaces ethernet eth11 hw-id ‘00:1d:d8:b7:1c:07’
set interfaces ethernet eth11 smp-affinity ‘auto’
set interfaces ethernet eth11 speed ‘auto’
set interfaces loopback lo
set interfaces vxlan vxlan4040 bridge-group bridge ‘br4040’
set interfaces vxlan vxlan4040 remote ‘10.90.10.71’
set interfaces vxlan vxlan4040 remote-port ‘8472’
set interfaces vxlan vxlan4040 vni ‘4040’
set policy prefix-list DENY-ALL rule 1 action ‘deny’
set policy prefix-list DENY-ALL rule 1 le ‘32’
set policy prefix-list DENY-ALL rule 1 prefix ‘0.0.0.0/0’
set protocols bgp 58580 neighbor 10.90.10.71 address-family ipv4-unicast nexthop-self
set protocols bgp 58580 neighbor 10.90.10.71 address-family ipv4-unicast prefix-list export ‘DENY-ALL’
set protocols bgp 58580 neighbor 10.90.10.71 address-family ipv4-unicast prefix-list import ‘DENY-ALL’
set protocols bgp 58580 neighbor 10.90.10.71 address-family ipv4-unicast soft-reconfiguration inbound
set protocols bgp 58580 neighbor 10.90.10.71 description ‘Dev-Test-BGP-session’
set protocols bgp 58580 neighbor 10.90.10.71 remote-as ‘58580’
set protocols static route 10.95.10.111/32 next-hop 10.90.10.71
set service snmp community “String” authorization ‘rw’
set service snmp community “String” client ‘Public IP of HV’
set service snmp community “String” client ‘Public IP of Monitoring Server’
set service snmp community “String” client ‘Public IP of Monitoring Server’
set service snmp community “String” client ‘10.90.10.5’
set service snmp community “String” client ‘10.90.10.187’
set service snmp community “String” network ‘Public Network’
set service snmp listen-address 10.90.10.70 port ‘161’

I included the config here as I don’t seem to have upload rights perhaps it hasn’t been enabled?

I am seeing the 10.95.10.1 address as the BGP router address when I run a summary , I did see one of the devices go into active state once but post reboot they didn’t resume.

Any help is appreciated to resolve this issue

Thanks

Hello @JaimeSharp, which VyOS version running?
show version

Hi Dmitry,

These devices are running 1.2.6 currently

I would be happy to provide further information to you and appreciate your assistance as always.

Thanks

I propose to use internal
set protocols bgp 58580 neighbor 10.90.10.71 remote-as 'internal'
Provide the output of the command

show ip bgp summary 

In our lab, your config works properly

snmpbulkwalk -v2c -c 'String' -m BGP4-MIB -M /usr/share/snmp/mibs/ 10.90.10.70 bgpPeerState
BGP4-MIB::bgpPeerState.10.90.10.71 = INTEGER: established(6)

Hi Dmitry,

Thank you for confirming the config looks ok, I have made the change to remote-as internal and here is the bgp sum I had finished work for the week when you replied.

sh ip bgp sum

IPv4 Unicast Summary:
BGP router identifier 10.95.10.1, local AS number 58580 vrf-id 0
BGP table version 1
RIB entries 1, using 184 bytes of memory
Peers 1, using 20 KiB of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.90.10.71 4 0 11 33 0 0 0 never Idle

Total number of neighbors 1

and the corresponding peer

sh ip bgp sum

IPv4 Unicast Summary:
BGP router identifier 10.95.10.1, local AS number 58580 vrf-id 0
BGP table version 1
RIB entries 1, using 184 bytes of memory
Peers 1, using 20 KiB of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.90.10.70 4 0 13 39 0 0 0 never Idle

Compared to the result where it is set as 58580

sh ip bgp sum

IPv4 Unicast Summary:
BGP router identifier 10.95.10.1, local AS number 58580 vrf-id 0
BGP table version 1
RIB entries 1, using 184 bytes of memory
Peers 1, using 20 KiB of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.90.10.71 4 58580 13 39 0 0 0 never Idle

And the Message Recieved and sent values are low as that is post a reboot of the devices.

I appreciate the assistance as always and will look into this a little further / trial on another device with EBGP sessions as well.

Thanks