[166993] in North American Network Operators' Group
Re: BGP neighbor/configuration testing
daemon@ATHENA.MIT.EDU (Eric A Louie)
Mon Nov 25 14:06:45 2013
Date: Mon, 25 Nov 2013 11:06:33 -0800 (PST)
From: Eric A Louie <elouie@yahoo.com>
To: Daniel Rohan <drohan@gmail.com>
In-Reply-To: <CAJXc8RJOb7a26rGqbTNnMTQfHqU=Ajobo6SLi=w2GFGr7aXfAg@mail.gmail.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Reply-To: Eric A Louie <elouie@yahoo.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
That's a natural first impression but there are no passwords configured on =
the BGP session on either router.=A0 I know it looks like an authentication=
error but it's a "misnomer" (at least from the searches I did on the error=
message).=A0 From the sequence of messages, we get Established and 2 secon=
ds later the session Closes.=A0 The reason for the Close may lead us to the=
solution.=0A=0AI'm reluctant to turn on debug bgp because this is a live p=
roduction router, and if I hose it, there will be a lot of 'splainin to do =
[1]=0A=0A[1]=A0http://www.quotecounterquote.com/2011/05/lucy-you-got-some-s=
plainin-to-do.html=0A=0A=0A=0A=0A=0A>________________________________=0A> F=
rom: Daniel Rohan <drohan@gmail.com>=0A>To: Eric A Louie <elouie@yahoo.com>=
=0A>Cc: Joe Abley <jabley@hopcount.ca>; "nanog@nanog.org" <nanog@nanog.org=
> =0A>Sent: Monday, November 25, 2013 10:55 AM=0A>Subject: Re: BGP neighbor=
/configuration testing=0A> =0A>=0A>=0A>Seems like:=0A>=A0=0A>Nov 25 06:28:3=
4.837 pacific: %BGP-3-NOTIFICATION: received from neighbor xxx.118.92.149 2=
/5 (authentication failure) 0 bytes=0A>>=0A>should be a good starting place=
. I'm assuming you've already discussed auth keys with your provider and if=
everyone is putting that in correctly, I'd suggest turning on debugging to=
see what exactly that message is all about.=A0=0A>=0A>=0A>Dan=A0=0A>=0A>
