Skip to main content
subramanis
Staff
Staff
September 14, 2021

Technical Tip: Notification Error Message: (OPEN Message Error/Bad BGP Identifier)

  • September 14, 2021
  • 0 replies
  • 14566 views
Description
The BGP neighbourship will stay in Idle and showing the below error when '# get router info bgp neighbors' is executed.

Notification Error Message: (OPEN Message Error/Bad BGP Identifier.)

Solution
This error will occur when both BGP neighbors having the same router ID.





'FGT1' Configuration.
FGT1 # show router bgp
# config router bgp
    set as 64512
    set router-id 10.0.0.1 <-----
    # config neighbor
        edit "10.0.0.2"
            set remote-as 64513
        next
    end
FGT1# get router info bgp summary
VRF 0 BGP router identifier 10.0.0.1, local AS number 64512
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries

Neighbor V         AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.0.0.2 4      64513     175     427        0    0    0    never Idle       
Total number of neighbors 1

FGT1# get router info bgp  neighbors
VRF 0 neighbor table:
BGP neighbor is 10.0.0.2, remote AS 64513, local AS 64512, external link
  BGP version 4, remote router ID 0.0.0.0
  BGP state = Idle
  Last read 00:00:02, hold time is 180, keepalive interval is 60 seconds
  Configured hold time is 180, keepalive interval is 60 seconds
  Received 177 messages, 1 notifications, 0 in queue
  Sent 267 messages, 167 notifications, 0 in queue
  Route refresh request: received 0, sent 0
  Minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes

 For address family: IPv6 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 Connections established 3; dropped 3
Last Reset: 00:00:02, due to BGP Notification sent
Notification Error Message: (OPEN Message Error/Bad BGP Identifier.) <-----
'FGT2' Configuration.
FGT2# show router bgp
config router bgp
    set as 64513
    set router-id 10.0.0.1 <-----
    config neighbor
        edit "10.0.0.1"
            set remote-as 64512
        next
    end
FGT2# get router info bgp summary
VRF 0 BGP router identifier 10.0.0.1, local AS number 64513
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries

Neighbor V         AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.0.0.1 4      64512     204     486        0    0    0    never Active     
Total number of neighbors 1

FGT2# get router info bgp neighbors
VRF 0 neighbor table:
BGP neighbor is 10.0.0.1, remote AS 64512, local AS 64513, external link
  BGP version 4, remote router ID 0.0.0.0
  BGP state = Idle
  Last read 00:00:03, hold time is 180, keepalive interval is 60 seconds
  Configured hold time is 180, keepalive interval is 60 seconds
  Received 203 messages, 2 notifications, 0 in queue
  Sent 296 messages, 192 notifications, 0 in queue
  Route refresh request: received 0, sent 0
  Minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 For address family: IPv6 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes

 Connections established 3; dropped 3
Last Reset: 00:00:03, due to BGP Notification sent
Notification Error Message: (OPEN Message Error/Bad BGP Identifier.) <-----
Note.
The Router ID is the same on both the firewalls.

Changed the router id to 10.0.0.2 on 'FGT2'.
FGT2# show router bgp
config router bgp
    set as 64513
    set router-id 10.0.0.2
    config neighbor
        edit "10.0.0.2"
            set remote-as 64512
        next
    end
FGT1# execute router clear  bgp ip 10.0.0.2       <----- Clear the neighbourship.

FGT1# get router info bgp  summary

VRF 0 BGP router identifier 10.0.0.1, local AS number 64512
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries

Neighbor V         AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.0.0.2 4      64513     241     580        0    0    0 00:01:14        0
Total number of neighbors 1

FGT1# get router info bgp neighbors
VRF 0 neighbor table:
BGP neighbor is 10.0.0.2, remote AS 64513, local AS 64512, external link
  BGP version 4, remote router ID 10.0.0.2
  BGP state = Established, up for 00:01:20
  Last read 00:00:33, hold time is 180, keepalive interval is 60 seconds
  Configured hold time is 180, keepalive interval is 60 seconds
  Neighbor capabilities:
    Route refresh: advertised and received (old and new)
    Address family IPv4 Unicast: advertised and received
    Address family IPv6 Unicast: advertised and received
  Received 240 messages, 1 notifications, 0 in queue
  Sent 358 messages, 222 notifications, 0 in queue
  Route refresh request: received 0, sent 6
  Minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 For address family: IPv6 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 Connections established 7; dropped 6
Local host: 10.0.0.1, Local port: 12741
Foreign host: 10.0.0.2, Foreign port: 179
Nexthop: 10.0.0.1
Nexthop interface: port2
Nexthop global: ::
Nexthop local: ::
BGP connection: non shared network
Last Reset: 00:01:27, due to BGP Notification sent
Notification Error Message: (CeaseUnspecified Error Subcode) <-----
The issue is resolved once changed the different router ID on 'FGT2'.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT