Configuring BGP Monitoring

When the FW's service interface works at Layer 3 and connects to a router and BGP runs between the FW and router, you can configure the VGMP group to monitor the BGP peer status to quickly detect BGP route faults on the network and trigger an active/standby switchover.

Prerequisites

Complete service interface configurations, such as IP address and security zone configurations.
BGP is configured on the FWs and their downstream and upstream routers.
A security policy is configured to permit legitimate traffic.

Context

The FW's service interface works at Layer 3 and connects to a router. The FW and router run BGP. To enable the FW to detect BGP route faults in a timely manner to trigger an active/standby switchover. Configure the VGMP group to monitor the BGP peer status on both active and standby devices. To quickly trigger an active/standby switchover and reduce the adverse impact on services, you are advised to configure BFD-BGP interworking, so that BFD can quickly detect link faults and notify BGP of the faults, speeding up BGP's response to network topology changes.

After the VGMP group is configured to monitor the BGP peer status, the VGMP group priority reduces by 2 when the BGP peer state changes from Non-established to another state on the active device, triggering an active/standby switchover. When the BGP peer state changes to Established, the VGMP group priority increases by 2. As intermittent disconnection may cause BGP peer relationship flapping and each peer relationship change will trigger an active/standby FW switchover, to prevent repeated switchovers, you are advised to run the undo hrp preempt command to disable the preemption function.

The function of the VGMP group monitoring the BGP peer status is supported only in non-mirroring mode.

Procedure

In the user view, access the system view.
```
system-view
```
Optional: Set a hold-off period for a VGMP group to monitor the BGP peer status.
```
hrp track bgp first-check-delay delay-minutes
```
The establishment of a BGP adjacency takes time during network deployment or adjustment. To prevent an active/standby switchover from being performed before the BGP adjacency is established, run the hrp track bgp first-check-delay command to set a new hold-off period for the VGMP group to monitor the BGP peer status. During the hold-off period, any change in the BGP peer status does not trigger the adjustment of the priority of the monitoring VGMP group.

By default, a VGMP group starts to monitor the BGP peer status after a hold-off period of 10 minutes.

Configure a VGMP group to monitor the BGP peer status.

hrp track bgp peer peer-address [ vpn-instance vpn-instance-name ]