FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
subramanis
Staff
Staff
Article Id 193783
Description
The BGP neighbourship will stay in Idle and showing the below error when '# get router info bgp neighbors' is executed.

Notification Error Message: (OPEN Message Error/Bad BGP Identifier.)

Solution
This error will occur when both BGP neighbors having the same router ID.





'FGT1' Configuration.
FGT1 # show router bgp
# config router bgp
    set as 64512
    set router-id 10.0.0.1 <-----
    # config neighbor
        edit "10.0.0.2"
            set remote-as 64513
        next
    end
FGT1# get router info bgp summary
VRF 0 BGP router identifier 10.0.0.1, local AS number 64512
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries

Neighbor V         AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.0.0.2 4      64513     175     427        0    0    0    never Idle       
Total number of neighbors 1

FGT1# get router info bgp  neighbors
VRF 0 neighbor table:
BGP neighbor is 10.0.0.2, remote AS 64513, local AS 64512, external link
  BGP version 4, remote router ID 0.0.0.0
  BGP state = Idle
  Last read 00:00:02, hold time is 180, keepalive interval is 60 seconds
  Configured hold time is 180, keepalive interval is 60 seconds
  Received 177 messages, 1 notifications, 0 in queue
  Sent 267 messages, 167 notifications, 0 in queue
  Route refresh request: received 0, sent 0
  Minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes

 For address family: IPv6 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 Connections established 3; dropped 3
Last Reset: 00:00:02, due to BGP Notification sent
Notification Error Message: (OPEN Message Error/Bad BGP Identifier.) <-----
'FGT2' Configuration.
FGT2# show router bgp
config router bgp
    set as 64513
    set router-id 10.0.0.1 <-----
    config neighbor
        edit "10.0.0.1"
            set remote-as 64512
        next
    end
FGT2# get router info bgp summary
VRF 0 BGP router identifier 10.0.0.1, local AS number 64513
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries

Neighbor V         AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.0.0.1 4      64512     204     486        0    0    0    never Active     
Total number of neighbors 1

FGT2# get router info bgp neighbors
VRF 0 neighbor table:
BGP neighbor is 10.0.0.1, remote AS 64512, local AS 64513, external link
  BGP version 4, remote router ID 0.0.0.0
  BGP state = Idle
  Last read 00:00:03, hold time is 180, keepalive interval is 60 seconds
  Configured hold time is 180, keepalive interval is 60 seconds
  Received 203 messages, 2 notifications, 0 in queue
  Sent 296 messages, 192 notifications, 0 in queue
  Route refresh request: received 0, sent 0
  Minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 For address family: IPv6 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes

 Connections established 3; dropped 3
Last Reset: 00:00:03, due to BGP Notification sent
Notification Error Message: (OPEN Message Error/Bad BGP Identifier.) <-----
Note.
The Router ID is the same on both the firewalls.

Changed the router id to 10.0.0.2 on 'FGT2'.
FGT2# show router bgp
config router bgp
    set as 64513
    set router-id 10.0.0.2
    config neighbor
        edit "10.0.0.2"
            set remote-as 64512
        next
    end
FGT1# execute router clear  bgp ip 10.0.0.2       <----- Clear the neighbourship.

FGT1# get router info bgp  summary

VRF 0 BGP router identifier 10.0.0.1, local AS number 64512
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries

Neighbor V         AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.0.0.2 4      64513     241     580        0    0    0 00:01:14        0
Total number of neighbors 1

FGT1# get router info bgp neighbors
VRF 0 neighbor table:
BGP neighbor is 10.0.0.2, remote AS 64513, local AS 64512, external link
  BGP version 4, remote router ID 10.0.0.2
  BGP state = Established, up for 00:01:20
  Last read 00:00:33, hold time is 180, keepalive interval is 60 seconds
  Configured hold time is 180, keepalive interval is 60 seconds
  Neighbor capabilities:
    Route refresh: advertised and received (old and new)
    Address family IPv4 Unicast: advertised and received
    Address family IPv6 Unicast: advertised and received
  Received 240 messages, 1 notifications, 0 in queue
  Sent 358 messages, 222 notifications, 0 in queue
  Route refresh request: received 0, sent 6
  Minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 For address family: IPv6 Unicast.
  BGP table version 1, neighbor version 0
  Index 1, Offset 0, Mask 0x2
  Community attribute sent to this neighbor (both)
  0 accepted prefixes, 0 prefixes in rib
  0 announced prefixes
 Connections established 7; dropped 6
Local host: 10.0.0.1, Local port: 12741
Foreign host: 10.0.0.2, Foreign port: 179
Nexthop: 10.0.0.1
Nexthop interface: port2
Nexthop global: ::
Nexthop local: ::
BGP connection: non shared network
Last Reset: 00:01:27, due to BGP Notification sent
Notification Error Message: (CeaseUnspecified Error Subcode) <-----
The issue is resolved once changed the different router ID on 'FGT2'.

Contributors