FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nithincs
Staff & Editor
Staff & Editor
Article Id 379183
Description This article describes how to find out whether FortiGate was the initiator or responder during the BGP peering.
Scope FortiGate.
Solution

FortiGate BGP neighbor command output consists of Connection status information, which provides details about the TCP connection.

 

line1.JPG


Fortinet1 # get router info bgp neighbors 2.2.2.2
VRF 0 neighbor table:
BGP neighbor is 2.2.2.2, remote AS 64512, local AS 64512, internal link
BGP version 4, remote router ID 10.10.20.1
BGP state = Established, up for 00:54:11
Last read 00:00:13, hold time is 180, keepalive interval is 60 seconds
Configured hold time is 180, keepalive interval is 60 seconds

.

.

.

Connections established 8; dropped 7
Local host: 1.1.1.1, Local port: 5781 <-----
Foreign host: 2.2.2.2, Foreign port: 179 <----- Foreign port as 179 indicates TCP connection was initiated by local FortiGate.
Egress interface: 5
Nexthop: 1.1.1.1
Nexthop interface: lp2
Nexthop global: ::
Nexthop local: ::
BGP connection: non shared network
Last Reset: 00:56:00, due to BGP Notification sent
Notification Error Message: (CeaseUnspecified Error Subcode)


=========================================================

 

Fortinet2 # get router info bgp nei 1.1.1.1
VRF 0 neighbor table:
BGP neighbor is 1.1.1.1, remote AS 64512, local AS 64512, internal link
BGP version 4, remote router ID 10.10.50.1
BGP state = Established, up for 00:57:20
Last read 00:00:09, hold time is 180, keepalive interval is 60 seconds
Configured hold time is 180, keepalive interval is 60 seconds

.

.

.

Connections established 8; dropped 7
Local host: 2.2.2.2, Local port: 179 <----- Local port as indicates, TCP connection came from remote BGP peer.
Foreign host: 1.1.1.1, Foreign port: 5781
Egress interface: 4
Nexthop: 2.2.2.2
Nexthop interface: loopback1
Nexthop global: ::
Nexthop local: ::
BGP connection: non shared network
Last Reset: 00:59:09, due to BGP Notification received
Notification Error Message: (CeaseUnspecified Error Subcode)

 

Related article:

Technical Tip: Configuring IBGP and EBGP neighborship