Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Sat Nov 18, 2017 4:31 pm


Author Message
admin
Post  Post subject: BGP Notification Message (3), length: 21, OPEN Message Error (2), subcode Authentication Failure  |  Posted: Fri Nov 03, 2017 8:24 am
Site Admin

Joined: Mon Aug 03, 2009 8:43 am
Posts: 104

Offline
 

BGP Notification Message (3), length: 21, OPEN Message Error (2), subcode Authentication Failure

When Junos is configured for an external BGP session with a neighbor not directly connected, without the "multihop ttl 2" configuration statement, it will fail to accept the neighbor with a notification message following the open message:
Code:
   Notification Message (3), length: 21, OPEN Message Error (2), subcode Authentication Failure (5)


There is no fix, but correct configuration: if ebgp neighbor is not directly connected, it's mandatory to:
Code:
# set protocols bgp group <GROUP> multihop ttl 2

Under group or under neighbor.

_________________
VPSie - SSD VPS servers in AMS-IX, LINX, DE-CIX
https://vpsie.com





Top
Display posts from previous:  Sort by  
E-mail friendPrint view

Topics related to - "BGP Notification Message (3), length: 21, OPEN Message Error (2), subcode Authentication Failure"
 Topics   Author   Replies   Views   Last post 
There are no new unread posts for this topic. Junos: BGP label allocation failure: Need a nexthop address on LAN

mandrei99

1

1202

Mon Nov 10, 2014 4:28 am

mandrei99 View the latest post

There are no new unread posts for this topic. Example of BGP update message sent from Junos for a VPLS circuit

mandrei99

0

750

Fri Jul 19, 2013 9:24 am

mandrei99 View the latest post

There are no new unread posts for this topic. Example of BGP update message sent from Junos device when export policy is modified

mandrei99

0

657

Fri Jul 19, 2013 9:09 am

mandrei99 View the latest post

There are no new unread posts for this topic. Junos: error: VRF: vrf-import needs at least one target community or a reject policy for vrf in

mandrei99

0

1022

Wed Jul 03, 2013 8:39 am

mandrei99 View the latest post

 

Who is online
Users browsing this forum: No registered users and 0 guests
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO