Course contents

Module 6: Troubleshooting and PracticeLesson 6.4 (4 of 6 in this module)41 of 43 in the BGP course

BGP troubleshooting tickets

Five tickets, one fault each, all on the course network. Read the symptom and the output, decide what you would check next, then open the answer.

Advanced · 20 min read

You'll learn to find the cause of five common BGP faults from the symptom and one show command, and name the fix.

Each ticket gives a symptom and output from one router. The addresses are the course lab addresses.

Ticket 1: ISP A never comes up

Illustrative Cisco IOS XE output written for this lesson, not a router capture
R1#show ip bgp summary | begin Neighbor
Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
192.0.2.1       4        64501       0       0        1    0    0 00:09:30 Active
Ping to 192.0.2.1 succeeds from R1.
Show the cause

The link works, so the TCP connection is the problem. Check that ISP A has a neighbour statement for 192.0.2.2 with remote AS 64500, and that no access list blocks port 179. Here ISP A had no neighbour entry for R1, so it never answered. Add it and the state moves to Established.

Ticket 1: ISP A never comes up
Ticket 1: ISP A never comes upThe link works but the session is in Active.Ping workslink is fineNeighbour on ISP A?missing entryTCP 179not blocked

On small screens, swipe sideways or focus the diagram and use the arrow keys.

Because ping works, look at TCP and the neighbour configuration.

Ticket 2: the log shows a bad peer AS

Illustrative Cisco IOS XE output written for this lesson, not a router capture
R1#show logging | include BGP
%BGP-3-NOTIFICATION: sent to neighbor 192.0.2.1 2/2 (peer in wrong AS) 2 bytes FDE5
FDE5 is the hexadecimal form of the AS number received.
Show the cause

FDE5 is 64997 in decimal, not 64501. The neighbour statement on R1 claims the wrong remote AS, or the other side is running a different AS than agreed. Compare neighbor 192.0.2.1 remote-as with what ISP A says, and fix whichever is wrong.

Ticket 2: bad peer AS
Ticket 2: bad peer ASThe configured remote-as does not match the AS in the neighbour's OPEN.Configuredremote-as 64502In the OPENMy AS 64501does not match

On small screens, swipe sideways or focus the diagram and use the arrow keys.

The TCP connection works, which is why a NOTIFICATION arrives.

Ticket 3: R2 sees the R1 path as not valid

Illustrative Cisco IOS XE output written for this lesson, not a router capture
R2#show ip bgp
     Network          Next Hop            Metric LocPrf Weight Path
 i 203.0.113.0      192.0.2.1                0    100      0 64501 i
 *>  203.0.113.0      192.0.2.5                0             0 64502 i
The iBGP session is Established.
Show the cause

The R1 path has no * because its next hop, 192.0.2.1, is on R1's ISP link and R2 cannot reach it. The path is not valid, so it cannot be a backup if ISP B fails. Add neighbor 10.255.0.2 next-hop-self on R1 and clear soft out.

Ticket 4: ISP A does not learn the company prefix

Illustrative Cisco IOS XE output written for this lesson, not a router capture
R1#show ip bgp neighbors 192.0.2.1 advertised-routes
Total number of prefixes 0
The network statement for 198.51.100.0 mask 255.255.255.0 is in the configuration.
Show the cause

A network statement advertises a route only if the exact prefix exists in the routing table. If the LAN interface is down or its mask differs, nothing matches. Check show ip route 198.51.100.0. If the interface is fine, check the outbound prefix list.

Ticket 4: prefix not advertised
Ticket 4: prefix not advertisedThe network statement needs the exact prefix in the routing table.network statementpresentExact route in RIB?interface up, mask equalOutbound filterpermits the prefix

On small screens, swipe sideways or focus the diagram and use the arrow keys.

Check the route first, then the outbound filter.

Ticket 5: the best path will not install

Illustrative Cisco IOS XE output written for this lesson, not a router capture
R1#show ip bgp rib-failure
Network            Next Hop                      RIB-failure   RIB-NH Matches
203.0.113.0/24     10.255.0.2            Higher admin distance             n/a
BGP says the iBGP path is best, but traffic still goes elsewhere.
Show the cause

iBGP has an administrative distance of 200. Another source, such as a static or IGP route to the same prefix with a lower distance, wins the routing table. Remove the other route or change its distance if BGP should carry the traffic.

Ticket 5: best path will not install
Ticket 5: best path will not installBGP selects a path but another source has the lower administrative distance.BGP pathbest in the BGP tabledistance 200Another routestatic or IGPlower distance winsloses to

On small screens, swipe sideways or focus the diagram and use the arrow keys.

iBGP distance is 200, so static and IGP routes win.

Check your method

Predict · scenario 1

A session is Established but a prefix is not on the neighbour. Which command on the sender is the best first check?

Predict · scenario 2

FDE5 appears in a notification message. What do you do first?

Predict · scenario 3

A network statement is present but the prefix is not advertised. What is the likely reason?

FAQ

Should I try the fix before opening the answer?
Yes. Say the cause out loud first, then open the answer. Practising the diagnosis is the point.