thank you.

basically don't care much on what kind of updates it gives... i just want to force the OTHER device to initiate the connection, ie: send the SYN.

I want bgp to LISTEN for a neighbor , not try and connect to one itself.

thanks

I hope you got the point. You still need the neighbor between the devices to receive advertisements. But, if you don't want to advertise anything then do not redistribute anything into BGP or use network statements. If you are multihoming and already have BGP routes in the routing table then use filters suggested above to make sure you aren't advertising any routes.

HTH

Sundar

Thank you Sundar.

I was just looking from a TCP level. Where router just recieve the "SYN"

Just trying to troubleshoot from TCP level , trying understand any error codes.

Krishnan,

You can do this using the following command:

neighbor x.x.x.x transport connection-mode passive

For more information on this command, please refer to the following URL:

http://www/en/US/products/ps6350/products_command_reference_chapter09186a0080454cee.html#wp1113611

Hope this helps,

thank you Sundar.

Can you repost the URL, it does not seem to work

thank you

Sorry Krishnan,

There it is.

http://www.cisco.com/en/US/products/ps6350/products_command_reference_chapter09186a0080454cee.html#wp1113611

Hope this helps,

thank you Sundar

-Krishnan

Krishnan,

Harold posted the link but I don't think that command is meant for what you are trying to achieve. Anyway, here's the link for that command.

http://www.cisco.com/en/US/products/ps6566/products_command_reference_chapter09186a008079e0f6.html

If you want to receive BGP SYN packets but not send any BGP packets out then you can apply an ACL similar to this one on the interface through which the neighbor is connected.

access-list 100 deny tcp any any eq bgp

HTH

Sundar

Sundar,

This command is meant exactly for what Krishnan wanted to accomplish, meaning to prevent the local router from actively open the TCP session on port 179.

Hope this helps,

Harold,

But then based on the description of this command it appears if the device receives TCP SYN packets from the peer then it would respond with ACK packets in passive mode. Unless I misunderstood Krishnan he doesn't want any BGP packets to be sent by this device and wants to only continue receiving SYN packets from the peer for troubleshooting purposes.

HTH

Sundar

Sundar,

I was just responding based on the following question from Krishnan:

"basically don't care much on what kind of updates it gives... i just want to force the OTHER device to initiate the connection, ie: send the SYN.

I want bgp to LISTEN for a neighbor , not try and connect to one itself."

Regards,

Thank you Hritter.

I was just looking at receiving SYN packets from the peer for troubleshooting purposes.

appreciate the responses.