Re: [j-nsp] SRX drops BGP session

2011-10-17 Thread Jeroen Valcke
Hello everybody, Thanks for all the suggestions. I finally managed to get it working. Actually, my interface was already in packet mode. When I changed it to flow-mode the bgp session came up without any issue. Somebody more confident with the SRX-platform pointed out that I need to add some

Re: [j-nsp] SRX drops BGP session

2011-10-14 Thread Pavel Lunin
Would it no be advisae to either teace it or a tcpdump from the OS you can see what packets are being sent and received on the interface? Generally yes, but. Though this doesn't seem to be the case for Jeroen since he uses eBGP with direct interface address peering, you must keep in mind that

[j-nsp] SRX drops BGP session

2011-10-13 Thread Jeroen Valcke
Hello, I've setup a BGP session between an M120 and an SRX240. Session comes up but after 1m30sec the session is shut down. The BGP error is Hold Timer Expired Error. I'm pretty sure that the SRX is blocking the BGP keepalives after the initial BGP session has been established. Indeed, when I

Re: [j-nsp] SRX drops BGP session

2011-10-13 Thread Harry Reynolds
...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Jeroen Valcke Sent: Thursday, October 13, 2011 1:34 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] SRX drops BGP session Hello, I've setup a BGP session between an M120 and an SRX240. Session comes up but after 1m30sec

Re: [j-nsp] SRX drops BGP session

2011-10-13 Thread Paul Stewart
:34 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] SRX drops BGP session Hello, I've setup a BGP session between an M120 and an SRX240. Session comes up but after 1m30sec the session is shut down. The BGP error is Hold Timer Expired Error. I'm pretty sure that the SRX is blocking the BGP

Re: [j-nsp] SRX drops BGP session

2011-10-13 Thread Pavel Lunin
Indeed, when I check the session table on the SRX. I do get an entry for the BGP session, but it dissapears after only a few seconds. That seems wrong to me. You mean a firewall session in show security flow session? If so, let me express my doubts, an MTU related issue could make it close

Re: [j-nsp] SRX drops BGP session

2011-10-13 Thread randy.tay...@bell.ca
To: Jeroen Valcke jeroen.val...@belnet.be Cc: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net Sent: Thu Oct 13 18:30:50 2011 Subject: Re: [j-nsp] SRX drops BGP session Indeed, when I check the session table on the SRX. I do get an entry for the BGP session, but it dissapears after only