RouterOS’da BFD bilan sub‑sonli link monitoring

⏱ O‘qish vaqti: 2 daqiqa

RouterOS tarmog‘ida link xatoliklarini aniq va tez aniqlash muhim. BFD (Bidirectional Forwarding Detection) bu maqsadga mo‘ljallangan yengil protokol. Ushbu qo‘llanma BFD ni umumiy va multihop rejimlarda sozlash, BGP hamda OSPF’da qo‘llash, hamda sessiya holatini tekshirishni ko‘rsatadi.

Talablar

• RouterOS 7 yoki undan yuqori versiyasi
• Administrator huquqi bilan terminalga kirish
• BGP yoki OSPF konfiguratsiyasi mavjud
• Qo‘shimcha interfeyslar (masalan, sfp12)

Sozlash bosqichlari

1. BFD sessiyalarini umumiy ruxsat va taqiqlash

/routing bfd configuration menyusida sessiyalarni boshqarish mumkin. Misolda sfp12 interfeysida BFD sessiyalarini aniq taqiqlaymiz, qolgan interfeyslar (static ro‘yxatidagi) uchun ruxsat beramiz. Bu sozlamalar BFD sessiyalarini nazorat qilishning asosiy qadamidir.

/routing bfd configuration
add interfaces=sfp12 forbid-bfd=yes
add interfaces=static

2. Multihop BFD uchun manzil va VRF filtrlarini qo‘shish

/ip firewall address-list orqali BGP uchun ruxsat beriladigan manzillar ro‘yxatini yaratamiz, keyin /routing bfd configurationda bu ro‘yxat yoki CIDR blokini belgilab, kerakli VRFda sessiyalarni faollashtiramiz. Bu usul multihop yo‘llarda BFD ni aniq manzilga yo‘naltirishga yordam beradi.

/ip firewall address-list
add address=10.155.255.183 list=bgp_allow_bfd
add address=10.155.255.217 list=bgp_allow_bfd

/routing bfd configuration
add addresses=111.111.0.0/16 vrf=vrf1
add address-list=bgp_allow_bfd

3. BGP sessiyalarida BFD ni yoqish

BGP sessiyalarida BFD ni ishlatish uchun /routing bgp connection menyusida use-bfd=yes parametrini qo‘shamiz. BGP sessiyasi endi BFD holatini ko‘rsatadi – agar BFD down bo‘lsa, BGP ham down holatiga o‘tadi.

[admin@dr_02_BGP_MUM] /routing/bgp/session> print 
Flags: E - established 
 0 E ;;; BFD session down
     name="ovpn_test1-1" 
     remote.address=111.111.11.11@vrf1 .as=65530 .id=10.155.101.217 
     .capabilities=mp,rr,as4 .hold-time=infinity .messages=40717 
     .bytes=3436281 .eor="" 
     local.address=111.111.11.12@vrf1 .as=555 .id=111.111.11.12 
     .capabilities=mp,rr,gr,as4 .messages=1 .bytes=19 .eor="" 
     output.procid=20 
     input.procid=20 .filter=bgp-in ebgp 
     hold-time=infinity use-bfd=yes uptime=3s210ms 
     last-started=2023-05-19 09:54:04 prefix-count=3853

4. OSPF interfeyslarida BFD ni yoqish

OSPF qo‘shnilarida BFD ni yoqish uchun /routing ospf interface-template menyusida use-bfd=yes parametrini belgilash kifoya. Bu OSPF sessiyalarida ham sub‑sonli link monitoringini ta’minlaydi.

5. BFD sessiyalarining holatini tekshirish

BFD sessiyalarining joriy holatini /routing bfd session buyrug‘i bilan ko‘rib chiqish mumkin. Bu yerda sessiya up/inactive, multihop yoki local/remote manzillar, interval va multiplier kabi ma’lumotlar ko‘rsatiladi.

[admin@dr_02_BGP_MUM] /routing/bfd/session> print 
Flags: U - up, I - inactive 
 0 I ;;; BFD forbidden for destination address
     multihop=yes remote-address=10.155.101.183 local-address="" desired-tx-interval=0ms required-min-rx=0ms 
     multiplier=0 

 1   multihop=no remote-address=111.111.11.11%ovpn-out1@vrf1 local-address=111.111.11.12@vrf1 state=down 
     state-changes=0 desired-tx-interval=200ms required-min-rx=200ms remote-min-rx=1us multiplier=5 
     packets-rx=0 packets-tx=7674

Tekshirish

BFD sessiyalarining holatini /routing bfd session buyrug‘i bilan tekshiring va kerakli sessiya «up» holatda ekanligini tasdiqlang.

[admin@dr_02_BGP_MUM] /routing/bfd/session> print 
Flags: U - up, I - inactive 
 0 I ;;; BFD forbidden for destination address
     multihop=yes remote-address=10.155.101.183 local-address="" desired-tx-interval=0ms required-min-rx=0ms 
     multiplier=0 

 1   multihop=no remote-address=111.111.11.11%ovpn-out1@vrf1 local-address=111.111.11.12@vrf1 state=down 
     state-changes=0 desired-tx-interval=200ms required-min-rx=200ms remote-min-rx=1us multiplier=5 
     packets-rx=0 packets-tx=7674

Xulosa

BFD ni to‘g‘ri sozlash orqali RouterOS tarmog‘ingizda link xatoliklarini milisaniyalar ichida aniqlash mumkin. BGP va OSPF’da BFD ni yoqish tarmoq barqarorligini oshiradi.

Manba: BFD — help.mikrotik.com