问

使用过程中BFD超时的原因是什么

2020-11-01提问

0关注
1收藏，1204浏览

Djsbdjsobsh

Djsbdjsobsh 二段

粉丝：0人关注：1人

问题描述：

两台防火墙互联只有其中一台出现告警也检查了BGD的配置没有发现问题

组网及组网描述：

interface Route-Aggregation1
description TO-[DEZFWm03BHS-XDL2-M9016V]-Route-Aggregation1-70G
ip address 192.168.195.226 255.255.255.252
link-aggregation mode dynamic
#
interface Route-Aggregation3
description TO-[SDDZ-PA-CMNET-RT02-NE5KE]-100GE1/17/1/2
ip address 111.17.242.62 255.255.255.252
link-aggregation mode dynamic
tcp mss 1436
session log enable ipv4 inbound
session log enable ipv6 inbound
session log enable ipv4 outbound
session log enable ipv6 outbound
nat outbound 3001 address-group name addressgroup1
ipv6 address 2409:803C:0:81C::65/127
ipv6 address auto link-local
bfd min-transmit-interval 100
bfd min-receive-interval 100
bfd min-echo-receive-interval 400
bfd detect-multiplier 4
#
interface Route-Aggregation11
description TO-[DEZRTm04BZX-XDL2-M6000-8SP]-cgei-0/0/0/1
link-aggregation mode dynamic
#
interface Route-Aggregation11.10
description TO-[DEZRTm04BZX-XDL2-M6000-8SP]-cgei-0/0/0/1-Gn
ip address 192.168.195.229 255.255.255.252
ospf cost 10
ospf timer hello 1
ospf authentication-mode md5 145 cipher $c$3$GYrP8nVkNl7iqCUMF5Z1YJHzcJnPHm87Hox13huR
ospf network-type p2p
ospf bfd enable
ospfv3 16 area 0.0.0.0
ospfv3 cost 10
ospfv3 timer hello 1
ospfv3 bfd enable
ospfv3 network-type p2p
ospfv3 authentication-mode keychain ospfv3
vlan-type dot1q vid 10
ipv6 address 2409:803C:2A0C:8106::2/127
ipv6 address auto link-local
bfd min-transmit-interval 100
bfd min-receive-interval 100
bfd min-echo-receive-interval 400
bfd detect-multiplier 4
#
interface Route-Aggregation11.20
description TO-[DEZRTm04BZX-XDL2-M6000-8SP]-cgei-0/0/0/1-Gi
ip address 192.168.195.213 255.255.255.252
ospf cost 10
ospf timer hello 1
ospf authentication-mode md5 145 cipher $c$3$VNmZufkCtefOs2S2je1q6Ch6bMRReqFDDmUWOxDK
ospf network-type p2p
ospf bfd enable
ospfv3 6 area 0.0.0.0
ospfv3 cost 10
ospfv3 timer hello 1
ospfv3 bfd enable
ospfv3 network-type p2p
ospfv3 authentication-mode keychain ospfv3
vlan-type dot1q vid 20
ipv6 address 2409:803C:2A0C:8101::2/127
ipv6 address auto link-local
bfd min-transmit-interval 100
bfd min-receive-interval 100
bfd min-echo-receive-interval 400
bfd detect-multiplier 4
#
interface Route-Aggregation50
description TO-[SDDEZ-XDL2-ELOG-SW03]-smartgroup14
ip address 192.168.202.185 255.255.255.252
link-aggregation mode dynamic
#
interface Route-Aggregation51
description TO-[SDDEZ-XDL2-ELOG-SW04]-smartgroup14
ip address 192.168.202.189 255.255.255.252
link-aggregation mode dynamic
#
interface NULL0
#

#
interface HundredGigE0/0/25
port link-mode route
description TO-[SDDZ-PA-CMNET-RT02-NE5KE]-100GE1/17/1/2
lacp period short
port link-aggregation group 3
#
interface HundredGigE0/0/26
port link-mode route
shutdown
#
interface HundredGigE0/0/27
port link-mode route
description TO-[DEZRTm04BZX-XDL2-M6000-8SP]-cgei-0/0/0/1
lacp period short
port link-aggregation group 11
#

#
interface Ten-GigabitEthernet1/0/1
port link-mode route
shutdown
#
interface Ten-GigabitEthernet1/0/2
port link-mode route
description TO-[SDDEZ-XDL2-ELOG-SW03]-smartgroup14
lacp period short
port link-aggregation group 50
#

#

#
interface Ten-GigabitEthernet8/0/1
port link-mode route
shutdown
#
interface Ten-GigabitEthernet8/0/2
port link-mode route
description TO-[SDDEZ-XDL2-ELOG-SW04]-smartgroup14
lacp period short
port link-aggregation group 51
#

#

interface Ten-GigabitEthernet9/0/1
port link-mode route
description To-[DEZSW03BRJ-XDL2-S6220]-TenGigabitEthernet 2/0/5
duplex full
ip address 192.168.195.197 255.255.255.252
#

#
interface Ten-GigabitEthernet9/0/23
port link-mode route
description TO-[DEZFWm03BHS-XDL2-M9016V]-10GE9/0/23 -1*10GE
lacp period short
port link-aggregation group 1
#

bgp 65180
router-id 111.17.242.62
group CMNET-RR external
peer CMNET-RR connect-interface Route-Aggregation3
peer CMNET-RR bfd
peer CMNET-RR password cipher $c$3$I9Ky4GHzDRRAfC6mB9BzopRtQGcm9ENaRZM=
group CMNET-RR-v6 external
peer CMNET-RR-v6 connect-interface Route-Aggregation3
peer CMNET-RR-v6 bfd
peer CMNET-RR-v6 password cipher $c$3$DyJ0lx5rEm8XIHjayXCmbxF69i9P/XXjMcI=
peer 111.17.242.61 as-number 24444
peer 111.17.242.61 group CMNET-RR
peer 111.17.242.61 description SDDZ-PA-CMNET-RT01-NE5KE
peer 2409:803C:0:81C::64 as-number 24444
peer 2409:803C:0:81C::64 group CMNET-RR-v6
peer 2409:803C:0:81C::64 description SDDZ-PA-CMNET-RT01-NE5KE