Community discussions

MikroTik App
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

BGP Problem

Wed Mar 21, 2007 1:19 pm

I configured a new hardware with RouterOS 2.9.41 and the same configuration that the other MK that works fine.
With the original router all works great, it have RouterOS 2.9.30.
When connect the new hardware with the same configuration, 4 of 6 bgp peer doesn´t established the connection:

Example:

name="PEER1" instance=default remote-address=200.XX.17.1 remote-as=11XXX tcp-md5-key="" nexthop-choice=default multihop=no route-reflect=no hold-time=3m ttl=1 in-filter="" out-filter=filter-peer1-out remote-id=0.0.0.0 remote-hold-time=0s used-hold-time=0s used-keepalive-time=0s state=active

07:23:52 route,bgp,info Failed to open TCP connection: No route to host
07:23:52 route,bgp,info RemoteAddr=200.XX.17.1
07:23:52 route,bgp,info RemotePort=179


The configuration is the same just as the other, what could it be ??.


Thanks a lot.
 
changeip
Forum Guru
Forum Guru
Posts: 3833
Joined: Fri May 28, 2004 5:22 pm

Wed Mar 21, 2007 6:33 pm

ttl=1 ... can you reach 200.xx.17.1 within 1 hop from that router ?

Sam
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Wed Mar 21, 2007 6:43 pm

Yes Sam, in the other router (which are working now !) have the same configuration (with ttl=1).
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Thu Mar 22, 2007 2:21 pm

07:22:57 route,bgp,info Failed to open TCP connection: No route to host
07:22:57 route,bgp,info RemoteAddr=200.xx.17.1
07:22:57 route,bgp,info RemotePort=179
07:23:17 route,bgp,debug,timer ConnectRetryTimer expired
07:23:17 route,bgp,debug,timer RemoteAddr=200.xx.17.1
07:23:17 route,bgp,debug Connecting
07:23:17 route,bgp,debug RemoteAddr=200.xx.17.1
07:23:17 route,bgp,debug RemotePort=179
07:23:17 route,bgp,debug,state Entering Connect state
07:23:17 route,bgp,debug,state RemoteAddr=200.xx.17.1
07:23:17 route,bgp,info Failed to open TCP connection: No route to host
07:23:17 route,bgp,info RemoteAddr=200.xx.17.1
07:23:17 route,bgp,info RemotePort=179
07:23:17 route,bgp,debug,state Entering Active state
07:23:17 route,bgp,debug,state RemoteAddr=200.xx.17.1
07:23:19 route,bgp,debug,timer KeepaliveTimer expired
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6263
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Thu Mar 22, 2007 4:22 pm

anything changes if you set TTL more than 1? :roll:
 
danailpetrov
just joined
Posts: 14
Joined: Thu Mar 22, 2007 11:21 am

Thu Mar 22, 2007 4:53 pm

07:22:57 route,bgp,info Failed to open TCP connection: No route to host
07:22:57 route,bgp,info RemoteAddr=200.xx.17.1
07:22:57 route,bgp,info RemotePort=179
07:23:17 route,bgp,debug,timer ConnectRetryTimer expired
07:23:17 route,bgp,debug,timer RemoteAddr=200.xx.17.1
07:23:17 route,bgp,debug Connecting
07:23:17 route,bgp,debug RemoteAddr=200.xx.17.1
07:23:17 route,bgp,debug RemotePort=179
07:23:17 route,bgp,debug,state Entering Connect state
07:23:17 route,bgp,debug,state RemoteAddr=200.xx.17.1
07:23:17 route,bgp,info Failed to open TCP connection: No route to host
07:23:17 route,bgp,info RemoteAddr=200.xx.17.1
07:23:17 route,bgp,info RemotePort=179
07:23:17 route,bgp,debug,state Entering Active state
07:23:17 route,bgp,debug,state RemoteAddr=200.xx.17.1
07:23:19 route,bgp,debug,timer KeepaliveTimer expired
07:23:17 route,bgp,info Failed to open TCP connection: No route to host -> What is that? Can you reach the 200.xx.17.1 with ICMP echo request (ping) ? Did you have routing information for that route? /ip route print ? I believe that your router doesn't know how to reach his BGP neighbor.

Kind Regards,
Danail Petrov
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Fri Mar 23, 2007 2:01 pm

Danail, I can´t reach 200.xx.17.1 with ping.

Look the routing table:

# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
828 ADC 200.XX.17.0/24 200.XX.17.151 0 Peer1
829 Db 200.xX.17.0/24 r 200.XX.25.49 30 Peer2


And this is the routing table of my production router (it work fine):

# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE


2081 ADC 200.XX.17.0/24 200.XX.17.151 0 Peer1
2082 Db 200.XX.17.0/24 r 200.XX.17.1 20 Peer1
2083 Db 200.XX.17.0/24 r 200.XX.17.2 20 Peer1

The Bgp against Peer2 work ok.

Thanks a lot
 
danailpetrov
just joined
Posts: 14
Joined: Thu Mar 22, 2007 11:21 am

Fri Mar 23, 2007 2:23 pm

Danail, I can´t reach 200.xx.17.1 with ping.

Look the routing table:

# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
828 ADC 200.XX.17.0/24 200.XX.17.151 0 Peer1
829 Db 200.xX.17.0/24 r 200.XX.25.49 30 Peer2
Hi,
it looks like you have connection (Layer1,2) problems between two routers?That what i see, is one router with ip address 200.xx.17.1 (which is your production router) and the newest one 200.xx.17.151 which is in same broadcast domain as production router. So there is no routing decisions performed to connect them both , only layer2 ethernet connection must be fine. Can you see the ARP/IP association on both routers? Example: on your production router, try to /ip arp print to see what is in your ARP table. There must be an association with your hardware(MAC) address and the logical one (IP) like the output attached below:

# ADDRESS MAC-ADDRESS INTERFACE
0 D 192.168.11.10 00:20:ED:5E:06:25 LAN

Maybe i'm wrong , but it looks like you don't have layer2 connection between your routers. Maybe they are in different VLAN's , i don't know.But your problem is not in BGP protocol, i believe that you experiencing connection problems!


Kind Regards,
Danail Petrov
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Fri Mar 23, 2007 2:55 pm

Danail, no:

200.XX.17.151 is my production router that work OK
200.XX.17.1 is the router of my provider (PEER1)

I´m trying to change a hardware for a new one and copy the configuration of the production router to this new one (and with which have the problem).
Do you understand me ?.
Yes, I supposed that have layer 1,2 problem, but I can´t troubleshoot the problem !.


Thanks
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Fri Mar 23, 2007 5:03 pm

Janisk, I didn´t change the ttl, I´m going to try this tomorrow, what value must have ?. Remember that my production router have the ttl=1 and is a copy of them.
 
danailpetrov
just joined
Posts: 14
Joined: Thu Mar 22, 2007 11:21 am

Fri Mar 23, 2007 5:54 pm

Janisk, I didn´t change the ttl, I´m going to try this tomorrow, what value must have ?. Remember that my production router have the ttl=1 and is a copy of them.
The TTL value my friend, is an IP option. You don't have IP problems. IP operates at layer3 of OSI model,until you have layer1/2 problems, there is nothing you can do with IP. Check your physical connection (wires and switches)

BR
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Fri Mar 23, 2007 6:31 pm

I need to update the PC configuration.

i got working right now a PC with 4 NICs.
i wanted to upgrade this very old equipment with a new one, with the addition of 1 more NIC.

i have tested several motherboards earlier with no success:

the biggest problem is to find some MB with 5 PCI slots.
when finding such MB, some of the NICs were not detected by RouterOS.

i finally found an asus MB.

all NICs seemed to be working, but i got some strange beheavior, descripted above.

could it be hardware related?
is there a problem with number of the NICs and the PCI bus/IRQ´s etc ?


Thanks a lot
 
danailpetrov
just joined
Posts: 14
Joined: Thu Mar 22, 2007 11:21 am

Fri Mar 23, 2007 11:17 pm

I need to update the PC configuration.

i got working right now a PC with 4 NICs.
i wanted to upgrade this very old equipment with a new one, with the addition of 1 more NIC.

i have tested several motherboards earlier with no success:

the biggest problem is to find some MB with 5 PCI slots.
when finding such MB, some of the NICs were not detected by RouterOS.

i finally found an asus MB.

all NICs seemed to be working, but i got some strange beheavior, descripted above.

could it be hardware related?
is there a problem with number of the NICs and the PCI bus/IRQ´s etc ?


Thanks a lot
I have one more suspicion, are you sure that logical addresses (IP) are configured on the right ethernet adapters ? I mean , if you have 4 ethernet cards , you may easy getting confused about which one is configured and which one is actually attached to network?

To your other questions , i believe that there's not IRQ issues , because they can be shared when same kind of hardware is used (ethernet cards)

BR,
Danail Petrov
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Sun Mar 25, 2007 9:42 pm

I´m using 4 NIC´s 3COM 3c905C-TX/TX-M [Tornado] and connect him directly to peers, the link is OK, what could it be ??.


Thanks
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Mon Mar 26, 2007 1:45 pm

When monitoring links status I saw "link-ok" and then "no-link" (flaps), I supposed that the problem is the 3COM cards, could it be ??, could be the 2.9.41 version ?.

Please help me.


Thanks a lot.
 
changeip
Forum Guru
Forum Guru
Posts: 3833
Joined: Fri May 28, 2004 5:22 pm

Mon Mar 26, 2007 10:05 pm

filter all incoming routes and see if that makes it more stable. maybe you have a looping route or something misconfigured. I've seen specific routes cause problems (flaps, etc).

Sam
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Tue Mar 27, 2007 3:40 pm

Finally the problem was the 3COM cards, now use Realtek ..., I can´t understand what´s happend.



Thanks