HP VPN Firewall Appliances Network Management Configuration Guide

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

451

452

453

454

455

456

457

458

459

460

431

[FirewallB-GigabitEthernet1/1] bfd min-transmit-interval 500

[FirewallB-GigabitEthernet1/1] bfd min-receive-interval 500

[FirewallB-GigabitEthernet1/1] bfd detect-multiplier 6

4. Verify the configuration:

# Display the BFD information on Firewall A.

<FirewallA> display bfd session

Total Session Num: 1 Init Mode: Active

Session Working Under Ctrl Mode:

LD/RD SourceAddr DestAddr State Holdtime Interface

3/1 192.168.0.102 192.168.0.100 Up 1700ms GE1/1

# Display routes destined for 120.1.1.0/24 on Firewall A.

<FirewallA> display ip routing-table 120.1.1.0 verbose

Routing Table : Public

Summary Count : 1

Destination: 120.1.1.0/24

Protocol: OSPF Process ID: 1

Preference: 0 Cost: 2

IpPrecedence: QosLcId:

NextHop: 192.168.0.100 Interface: GigabitEthernet1/1

BkNextHop: 0.0.0.0 BkInterface:

RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0

Tunnel ID: 0x0 Label: NULL

BKTunnel ID: 0x0 BKLabel: NULL

State: Active Adv Age: 00h58m10s

Tag: 0

The output shows that Firewall A communicates with Firewall B through the Layer 2 switch.

# When the link between Firewall A and the Layer 2 switch fails, enable BFD debugging on

Firewall A.

<FirewallA> debugging bfd scm

<FirewallA> debugging bfd event

<FirewallA> debugging ospf event bfd

<FirewallA> terminal debugging

%Nov 12 18:34:48:823 2005 FirewallA BFD/5/LOG: Sess[192.168.0.102/192.168.0.100,

GE1/1], Sta : UP->DOWN, Diag: 1

%Nov 12 18:34:48:824 2005 FirewallA RM/4/RMLOG:OSPF-NBRCHANGE: Process 1, Neighbour

192.168.0.102 (GigabitEthernet1/1) from Full to Down

*0.50673825 FirewallA BFD/8/SCM:Sess[192.168.0.102/192.168.0.100,GE1/1],Oper:

Reset

*0.50673825 FirewallA BFD/8/EVENT:Send sess-down Msg, [Src:192.168.0.102,

Dst:192.168.0.100,GigabitEthernet1/1] Protocol: OSPF

*0.50673826 FirewallA RM/7/RMDEBUG:OSPF-BFD: Message Type rcv BFD down, Connect Type

direct-connect, Src IP Address 192.168.0.102, Src IFIndex 5, Dst IP Address

192.168.0.100

*0.50673827 FirewallA RM/7/RMDEBUG:OSPF-BFD: Message Type delete session, Connect

Type direct-connect, Src IP Address 192.168.0.102, Src IFIndex 5, Dst IP Address

192.168.0.100

OSPF 1: Nbr 192.168.0.100 Rcv KillNbr State Full -> Down.

*0.50673829 FirewallA BFD/8/EVENT:Receive Delete-sess, [Src:192.168.0.102,

Dst:192.168.0.100,GigabitEthernet1/1], Direct, Proto:OSPF