Re: BGP - Connection refused by remote host

From: Cristian Ionescu (cristian.ionescu@omnilogic.ro)
Date: Mon Feb 18 2008 - 06:01:51 ARST


Hi to all and thanks for all the reply s

I managed to peer with the BB after i changed my update source and put
e-bgp multihop on BB.
So this kind of message has nothing to do with wrong AS or no MD5. (good
to know....)

The other problem that i want to ask is what if this will happen in the
lab and i do not have control of the BB. What should i do?
Could be this message be generated by other problems?

Regards
Cristian

Tony Schaffran (GS) wrote:
> We are not in the lab now, are we?
>
> We need to see the BB config to help you identify the problem so you will
> know what the problem is in the lab when you cannot see the BB config.
>
>
> Tony Schaffran
> Network Analyst
> CCIE #11071
> CCNP, CCNA, CCDA,
> NNCDS, NNCSS, CNE, MCSE
>
> www.cconlinelabs.com
> Your #1 choice for online Cisco rack rentals.
>
>
> -----Original Message-----
> From: Cristian Ionescu [mailto:cristian.ionescu@omnilogic.ro]
> Sent: Sunday, February 17, 2008 10:10 AM
> To: groupstudy@cconlinelabs.com; M_A_Jones@DellTeam.com;
> ccielab@groupstudy.com
> Subject: RE: BGP - Connection refused by remote host
>
> yes....there are problem with the e-mails...
>
> The config are very simple:
> R6#
> interface Loopback0
> ip address 150.1.6.6 255.255.255.0
> !
> interface Serial0/0/0
> ip address 54.1.1.6 255.255.255.0
> !
> router bgp 100
> no synchronization
> bgp log-neighbor-changes
> neighbor 54.1.1.254 remote-as 54
> neighbor 54.1.1.254 update-source Loopback0
> no auto-summary
>
> for the BB i can give u the config...but in the lab u can not get into BB...
>
> -----Original Message-----
> From Tony Schaffran (GS) <groupstudy@cconlinelabs.com>
> Sent Sun 2/17/2008 5:35 PM
> To M_A_Jones@DellTeam.com; cristian.ionescu@omnilogic.ro;
> ccielab@groupstudy.com
> Subject RE: BGP - Connection refused by remote host
>
> I asked to see the configs for both sides yesterday morning.
>
> It is strange that my email has not been posted yet.
>
>
> Tony Schaffran
> Network Analyst
> CCIE #11071
> CCNP, CCNA, CCDA,
> NNCDS, NNCSS, CNE, MCSE
>
> www.cconlinelabs.com
> Your #1 choice for online Cisco rack rentals.
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> M_A_Jones@DellTeam.com
> Sent: Friday, February 15, 2008 8:15 AM
> To: cristian.ionescu@omnilogic.ro; ccielab@groupstudy.com
> Subject: RE: BGP - Connection refused by remote host
>
> Looks like the remote router before peering is asking for MD5
> authentication...Your local router is not using MD5 so the TCP session
> is being tore down..
>
> *Feb 14 11:33:31.259: BGP: 54.1.1.254 open active, local address
> 54.1.1.6
> TCB45114344 created
> *Feb 14 11:46:32.839: TCB45114344 setting property TCP_WINDOW_SIZE (0)
> 4511D1C8
> *Feb 14 11:46:32.839: TCB45114344 setting property TCP_MD5KEY (5) 0 *Feb
> 14 11:46:32.839: TCB45114344 setting property TCP_TOS (11) 4511D1A8 *Feb
> 14 11:46:32.839: TCB45114344 setting property TCP_OUT_TTL (24) 46B25A2A
> *Feb 14 11:46:32.839: TCP: Random local port generated 53511 *Feb 14
> 11:46:32.839: TCB45114344 bound to 54.1.1.6.53511 *Feb 14 11:46:32.839:
> TCP: sending SYN, seq 664141347, ack 0 *Feb 14 11:46:32.839: TCP0:
> Connection to 54.1.1.254:179, advertising MSS 1460 *Feb 14 11:46:32.839:
> TCP0: state was CLOSED -> SYNSENT [53511 -> 54.1.1.254(179)] *Feb 14
> 11:46:32.839: TCP0: state was SYNSENT -> CLOSED [53511 ->
> 54.1.1.254(179)] *Feb 14 11:46:32.839: TCP0: bad seg from 54.1.1.254 --
> closing
> connection: port 53511 seq 0 ack 664141348 rcvnxt 0 rcvwnd 0 len 0 *Feb
> 14 11:46:32.843: TCP0: connection closed - remote sent RST *Feb 14
> 11:46:32.843: TCB 0x45114344 destroyed *Feb 14 11:33:31.259: BGP:
> 54.1.1.254 open failed: Connection refused by remote host, open active
> delayed 29499ms (32000ms max, 28% jitter)
>
>
> Michael Jones
> Network Engineer
> Global Network Operations
> Dell Inc. | Information Technology
> W. 512.723.3268 | C. 512.966.6908
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Cristian Ionescu
> Sent: Thursday, February 14, 2008 6:40 AM
> To: Cisco certification
> Subject: BGP - Connection refused by remote host
>
> Hi GS
>
> I have a strange situation with a "simple" BGP peering session.
> I have 2 router connected over FR in different AS-es and i want to
> establish a peering session between them. Let's say i do not know the
> config of BB.
>
> AS100 - - - - - AS54
> R6 <----------> BB
>
> The config of R6 is:
>
> R6#
> interface Loopback0
> ip address 150.1.6.6 255.255.255.0
> !
> interface Serial0/0/0
> ip address 54.1.1.6 255.255.255.0
> !
> router bgp 100
> no synchronization
> bgp log-neighbor-changes
> neighbor 54.1.1.254 remote-as 54
> no auto-summary
> !
>
>
> BB is directly connected and the peer address is 54.1.1.254 (i have ping
> to this address)
>
> I get the following debug output:
>
> *Feb 14 11:33:31.259: BGP: 54.1.1.254 open active, local address
> 54.1.1.6
> TCB45114344 created
> *Feb 14 11:46:32.839: TCB45114344 setting property TCP_WINDOW_SIZE (0)
> 4511D1C8
> *Feb 14 11:46:32.839: TCB45114344 setting property TCP_MD5KEY (5) 0 *Feb
> 14 11:46:32.839: TCB45114344 setting property TCP_TOS (11) 4511D1A8 *Feb
> 14 11:46:32.839: TCB45114344 setting property TCP_OUT_TTL (24) 46B25A2A
> *Feb 14 11:46:32.839: TCP: Random local port generated 53511 *Feb 14
> 11:46:32.839: TCB45114344 bound to 54.1.1.6.53511 *Feb 14 11:46:32.839:
> TCP: sending SYN, seq 664141347, ack 0 *Feb 14 11:46:32.839: TCP0:
> Connection to 54.1.1.254:179, advertising MSS 1460 *Feb 14 11:46:32.839:
> TCP0: state was CLOSED -> SYNSENT [53511 -> 54.1.1.254(179)] *Feb 14
> 11:46:32.839: TCP0: state was SYNSENT -> CLOSED [53511 ->
> 54.1.1.254(179)] *Feb 14 11:46:32.839: TCP0: bad seg from 54.1.1.254 --
> closing
> connection: port 53511 seq 0 ack 664141348 rcvnxt 0 rcvwnd 0 len 0 *Feb
> 14 11:46:32.843: TCP0: connection closed - remote sent RST *Feb 14
> 11:46:32.843: TCB 0x45114344 destroyed *Feb 14 11:33:31.259: BGP:
> 54.1.1.254 open failed: Connection refused by remote host, open active
> delayed 29499ms (32000ms max, 28% jitter)
>
> Can u please tell me where is the problem? What is the cause of this
> kind of error message?
>
> Regards
> Cristian Ionescu
>
> This message (including any attachments) is intended only for the use of
> the individual or entity to which it is addressed and may contain
> information that is non-public, proprietary, privileged, confidential,
> and exempt from disclosure under applicable law or may constitute as
> attorney work product.
> If you are not the intended recipient, you are hereby notified that any
> use, dissemination, distribution, or copying of this communication is
> strictly prohibited. If you have received this communication in error,
> notify us immediately by telephone and
> (i) destroy this message if a facsimile or (ii) delete this message
> immediately if this is an electronic communication.
>
> Thank you,
> Support Team
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
> This message (including any attachments) is intended only for
> the use of the individual or entity to which it is addressed and
> may contain information that is non-public, proprietary,
> privileged, confidential, and exempt from disclosure under
> applicable law or may constitute as attorney work product.
> If you are not the intended recipient, you are hereby notified
> that any use, dissemination, distribution, or copying of this
> communication is strictly prohibited. If you have received this
> communication in error, notify us immediately by telephone and
> (i) destroy this message if a facsimile or (ii) delete this message
> immediately if this is an electronic communication.
>
> Thank you,
> Support Team
>
>
>
>
>

This message (including any attachments) is intended only for
the use of the individual or entity to which it is addressed and
may contain information that is non-public, proprietary,
privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product.
If you are not the intended recipient, you are hereby notified
that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and
(i) destroy this message if a facsimile or (ii) delete this message
immediately if this is an electronic communication.

Thank you,
Support Team



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2008 - 16:54:49 ARST