Thursday, May 30, 2024

BGP Peer Open-Sent issue in MikroTik and a Solution by BGP monitor

The “Open-Sent” state in BGP (Border Gateway Protocol) indicates that the router has sent an OPEN message and is waiting for an OPEN message from the peer. If your BGP peer is stuck in the “Open-Sent” state, it could be due to several reasons like:


Tunneling Issues: If you’re running a BGP session over an L2TP tunnel, the session might attempt to establish before the tunnel is up, and never times out1. When this happens, the BGP peer gets stuck in ‘open sent’. The common solution is to disable and then enable the BGP peer1.

Address Family Configuration: If you have selected both IP and IPv6 in the address families, but it only announces your IPv6 prefix and not also your IPv4 prefix, the IPv4 BGP session might not work and get stuck at "Open-Sent"2. You should create a unique session for each, IPv4 and IPv62.

Incorrect Details or Routing: The “Open-Sent” state can also occur due to incorrect details such as the remote-as on either side being wrong, or if the routing is incorrect2.

Software Bugs: In some versions of MikroTik, there might be bugs causing the BGP peering to get stuck in the “Open-Sent” state3. In such cases, you might need to manually disable and then enable the peer3.

This issue of “Open-Sent” is possible to resolve via Script and Scheduler in MikroTik.


Use following Script and Scheduler:

/system scheduler

add interval=30m name=BGP-MONITOR on-event=monitor-all-bgp-peers policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=may/30/2024 start-time=00:00:00

/system script

add dont-require-permissions=no name=monitor-all-bgp-peers owner=Shuvodip policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":foreach i in=[/routing bgp peer find] do={\r\

    \n  :local peerState [/routing bgp peer get \$i state]\r\

    \n  :if (\$peerState = \"opensent\") do={\r\

    \n    :local peerName [/routing bgp peer get \$i name]\r\

    \n    :log info \"BGP Peer \$peerName is in OpenSent state. Disabling and Enabling...\"\r\

    \n    /routing bgp peer disable \$i\r\

    \n    :delay 5s\r\

    \n    /routing bgp peer enable \$i\r\

    \n    :log info \"BGP Peer \$peerName has been disabled and enabled.\"\r\

    \n  }\r\

    \n}\r\

    \n\r\

    \n    }"


This script is designed to monitor the state of all BGP peers on your MikroTik router and automatically reset any that are stuck in the “Open-Sent” state. Here’s a brief explanation:

Scheduler: The /system scheduler command schedules the monitor-all-bgp-peers script to run every 30 minutes.

Script: The monitor-all-bgp-peers script does the following:

* It iterates over all BGP peers on the router.

* For each peer, it checks the current state.

* If a peer is in the “Open-Sent” state, it logs this event, disables the peer, waits for 5 seconds, and then enables the peer again. This is done to reset the state of the peer.

* It logs a message after the peer has been disabled and enabled.

This script can help in maintaining the stability of BGP sessions by ensuring that any peers that get stuck in the “Open-Sent” state are reset and can re-establish their sessions. 


It’s always a good idea to test scripts in a controlled environment before deploying them in a production network. If you have any more questions or need further clarification, feel free to ask! 😊



Thursday, April 25, 2024

Leveraging Cisco Intent-Based Networking DNA Assurance Post-Assessment Question and Answer Rev Up to Recert: Network Assurance

 1.  What is a supported file format to import a Site from Cisco Prime into Cisco DNA Center?

 

    CSV file

 

    .bat file

 

    Python script

 

    Excel spreadsheet

 

2. Which IBN functional process best describes the meaning of “intent” when referring to intent-based networking?

 

    Transforming raw data into meaningful insights.

 

    Activating network policies into device configuration syntax.

 

    Assuring operations using network analytics.

 

    Translating business network behavior into a network policy.

 

 3. If you enable device controllability in Cisco DNA Center, describe what happens when a device is discovered, assigned to a site, and then deleted from Cisco DNA Center.

 

    Cisco DNA Center provisions the device with site attributes and then deprovisions the site attributes when you delete the device.

 

    Cisco DNA Center provisions the device with site attributes, but the site attributes remain provisioned after you delete the device. However, the option to deprovision the site attributes is presented.

 

    Cisco DNA Center does not provision or deprovision site attributes if you enable device controllability in Cisco DNA Center.

 

    If you enable device controllability in Cisco DNA Center, you cannot delete the device.

 

4. Which of the following best describes the role of Cisco CMX?

 

    Provides the exact location of the clients on a floor map within the Cisco DNA Center user interface.

 

    Provides Cisco DNA Center with the health of the wireless clients based on radio signal strength.

 

    Provides authentication and authorization of the wireless clients when attempting to connect to the network that Cisco DNA Center manages.

 

    Provides a graphical reporting and auditing tool of wireless clients for Cisco DNA Center.


 5. Which of the following external applications can help populate Cisco DNA Center with an inventory of network devices?

 

    Cisco Prime Infrastructure

 

    Cisco ISE

 

    Cisco CMX

 

    IPAM applications Infoblox and BlueCat


 6.  Which of the following best describes the Assurance component of Cisco DNA Center?

 

    Provides a web interface to configure access control for network devices and clients.

 

    Provides a web interface that accesses the NDP and displays at-a-glance health and issues dashboards, trends and insights, and guided remediation steps.

 

    Provides closed-loop automation and provisioning of devices to remediate issues based on calculated insights.

 

    Provides a web interface to design network locations, define and provision policies, assure network performance and health, and provide guided remediation steps for issues.


7.Which is the minimum license level necessary for Assurance?

 

    Basic

 

    Essentials

 

    Advantage

 

    Premier


7. Which of the following statements is true about Health scores in Assurance?

 

    The latest health score calculates every 5-minutes for devices, clients, and applications.

 

    The health score range for clients (wired and wireless) is from 0–10, and a healthy client has a score that ranges from 7–10.

 

    The overall health of applications is a percentage that is calculated by taking the total number of all healthy applications divided by the total number of applications.

 

    The health score calculation for network devices cannot be customized.


 8. Which two of the following are true statements in the calculation of Application Health scores? (Choose two.)

 

The application health score is based on network QoS KPIs and application QoE.

 

The network QoS KPIs are network utilization, network latency, application server latency, packet loss, and jitter.

 

The application QoE is based on VoS scores using Cisco Validated Design thresholds based on traffic class per KPI.

 

Application health scores are calculated every 15 minutes.

 

The health score calculation for applications cannot be customized.


9. Which three of the following are true statements regarding streaming telemetry? (Choose three.)

 

The streaming telemetry data collection mechanism is described as a pull instead of a push mechanism.

 

Network management platforms subscribe to the collection of streaming telemetry data; the devices publish the data to the platform based on the subscription.

 

Streaming telemetry publishes to network management platforms periodically or based on changes in the data.

 

Network devices use more compute resources to forward streaming telemetry, but the network management platforms update faster.

 

Streaming telemetry is available on Cisco wireless infrastructure devices with specific operating systems.


10. Which of the following statements is true about Cisco DNA Center Assurance?

 

    Assurance is a functional component within the Cisco DNA Center NDP.

 

    Assurance is a functional component within the Cisco DNA Center NCP.

 

    Assurance is a part of the data correlation and analysis stage in the data processing architecture.

 

    Assurance is an application that uses APIs to access the Cisco DNA Center datastores.


 11.Separate collectors ingest data from a variety of telemetry and contextual sources; which of the following collectors can you customize for its collected KPIs and adjusted polling interval?

 

    CLI

 

    Cisco ISE

 

    NetFlow

 

    SNMP

 

    syslog

 

    SNMP traps

 

    NCP


 12.Which of the following is a true statement regarding the calculation of Client Health scores?

 

    The latest client health scores are calculated every 15-minutes.

 

    The overall client health consists of both wired and wireless clients.

 

    Wired and wireless client health score is based on the onboarding score plus the connectivity score.

 

    A wireless client’s connectivity score is the minimum score of the RSSI score or SNR score.

 

    The health score calculation for clients can be customized.


 13. Which three of the following are necessary steps to configure AVC in WLCs? (Choose three.)

 

Add a description containing the keyword lan to the device interfaces that are used for application visibility, then resynchronize the network device.

 

Configure an IP address on the interfaces that are used for application visibility.

 

Configure SNMP read/write credentials on the device.

 

Apply the Optimal telemetry profile to the network device.

 

Apply the Maximal telemetry profile to the network device.


14. Which of the following is available with the on-premise and cloud-based Cisco AI Network Analytics feature, but significantly enhanced when the cloud-based AI/ML engine is connected?

 

    Baselining

 

    Anomaly Detection

 

    Insights and Trends

 

    Comparative Analytics

 

    Predictive Analytics


15. Which statement best describes the use of the Device 360 view for viewing and evaluating issues?

 

    View the device health score, KPIs, and events on a timeline and list of open, resolved, and ignored issues.

 

    View the device health score, KPIs, and events on a timeline and list of open issues.

 

    View the device health score and KPIs on a timeline and list of open, resolved, and ignored issues.

 

    View the device health score and KPIs on a timeline and list of open issues.

 

    View the device health score on a timeline and list of open issues.


16. Which four statements are true about beeswarm charts in Cisco DNA Center Assurance for interpreting network insights? (Choose four.)

 

Circles represent a building and polygons represent an AP radio.

 

Circles represent an AP radio, and polygons represent a building.

 

The number of issues is reflected by a change in color in the shape on the beeswarm chart.

 

Issues are not represented in a beeswarm chart; only network insights display.

 

Network insights display a 7-day time period.

 

Network insights display a 4-week time period.

 

An arrow between shapes indicates the traffic flow between AP devices and buildings.

 

An arrow between shapes indicates a deviation in a monitored KPI.


 17. Which two of the following issues are detected by the Cisco AI Network Analytics features? (Choose two.)

 

AP down or rebooted

 

WLC excessive time lag from Cisco DNA Center

 

Onboarding wireless client connection issues

 

Application experience issues

 

Layer 2 loop issues (switch or router)


18. Which statement best describes the Cisco AI Network Analytics feature?

 

    Applies advanced artificial intelligence to provide anomaly detection of wired and wireless issues.

 

    Applies advanced artificial intelligence to provide anomaly resolution of wired and wireless issues.

 

    Applies advanced artificial intelligence and machine learning technologies to provide anomaly detection, remediation, network insights and trends, and comparative benchmarking.

 

    Applies advanced artificial intelligence to provide network insights and trends and comparative benchmarking.

 

    Applies ML technology to provide network insights and trends and comparative benchmarking.


 19. What are the three parameters that Cisco DNA Center uses to create the network heatmap? (Choose three.)

 

Site

 

KPI

 

RF band

 

Period (month/year)

 

SNR value

 

RSSI


20. Which statement best describes the role of the Machine Reasoning Engine in Cisco AI Network Analytics?

 

    Gathers user feedback to learn relevance, dynamically adapts, and learns from mistakes.

 

    Performs validation of data, anonymizes the data, forwards to the Cisco cloud-based AI/ML engine for analysis of network insights and trends.

 

    Determines what is normal for a given network and highlights deviations from expected behavior.

 

    Computes insights based on the embedded knowledge base and evidence, automates complex remediation workflows, and performs complex root cause analysis.


 21. How do you launch the Auto Packet Analyzer feature to troubleshoot client onboarding issues?

 

    Open Intelligent Capture on Client 360 view, choose an anomaly event that is labeled with a PCAP icon.

 

    Open Intelligent Capture on the Client 360 view and use the Wireless Packet Application Analysis dashlet.

 

    Use the Assurance > Manage > Intelligent Capture Settings > Client Schedule Capture menu.

 

    Use the Assurance > Manage > Intelligent Capture Settings > Client Data Packet Capture menu.


 22. Which of the following statements best describes intent-based networking?

 

    Transforming raw data into meaningful insights.

 

    Activating network policies into device configuration syntax.

 

    Assuring operations using network analytics.

 

    Translating business intent into a network policy.


 23. Data collectors ingest data from a variety of telemetry and contextual sources; which of the following data collectors can you customize for its collected KPIs and adjusted polling interval?

 

    CLI

 

    NetFlow

 

    SNMP

 

    NCP

 

24. Which two of the following are true statements regarding streaming telemetry? (Choose two.)

 

The streaming telemetry data collection mechanism is described as a pull instead of a push mechanism.

 

Network management platforms subscribe to the collection of streaming telemetry data; the devices publish the data to the platform based on the subscription.

 

Streaming telemetry publishes to network management platforms periodically or based on changes in the data.

 

Network devices use more compute resources to forward streaming telemetry.

 

Streaming telemetry is not available on Cisco wireless infrastructure devices regardless of operating systems.


25. Which three statements are true about beeswarm charts in Cisco DNA Center Assurance for interpreting network insights? (Choose three.)

 

Circles represent a building and polygons represent an AP radio.

 

Circles represent an AP radio, and polygons represent a building.

 

The number of issues is reflected by a change in color in the shape on the beeswarm chart.

 

Issues are not represented in a beeswarm chart; only network insights display.

 

An arrow between shapes indicates the traffic flow between AP devices and buildings.

 

An arrow between shapes indicates a deviation in a monitored KPI.

 

26. Cisco DNA Center Assurance communicates with Cisco Aironet 1800 Active sensors through a wired or wireless backhaul channel with which protocol?

 

    HTTPS

 

    SSH

 

    SNMP

 

    JTAPI

27. Which two of the following must you enable in Cisco DNA Center or integrate with Cisco DNA Center to allow you to view coverage heatmaps with real-time wireless client location tracking? (Choose two.)

 

Cisco CMX Integration

 

Intelligent Capture

 

Cisco AI Network Analytics

 

Cisco ISE Integration

 

Cisco Aironet 1800s Active Sensor

 

·         What are three categories of AP stats that Intelligent Capture collects? (Choose three.)

 

Onboarding Events

 

Channel Utilization

 

Power and Noise

 

Application Analysis

 

Interference

 

Disassociations


28. Which of the following Assurance tools are only for troubleshooting the wireless infrastructure?

 

    Client 360 view

 

    Client Health dashboard

 

    Sensor tests

 

    Cisco AI Network Analytics


 29. Which of the following statements regarding sensor tests is true?

 

    A sensor test template can be configured to test only one SSID.

 

    A sensor test template can be configured to test only one radio band.

 

    A sensor can have only one test template applied at a time.

 

    Sensor tests can be scheduled only on specific days and times or run at periodic intervals.

 

    A sensor test template is always applied to all sensors located on the same building floor

BGP Peer Open-Sent issue in MikroTik and a Solution by BGP monitor

The “Open-Sent” state in BGP (Border Gateway Protocol) indicates that the router has sent an OPEN message and is waiting for an OPEN message...