On the Standby Tier 0 logical router, we expect to see BGP down, when the Tier 0 logical router is in A/S mode and the neighbor is over an IPSEC VPN (VTI Interface), as the VPN is not active on this edge node.
If we do get interfaces, we see the VTI (Virtual Tunnel Interface) interface which is connecting to the BGP neighbor, is DOWN, which is expected when the logical router is in standby mode:
{
"ifuuid": "xxxxxxxx-ea54-49be-8237-xxxxxxxxxxxx",
"ifuid": 538,
"type": "vti",
"ptype": "vti",
"enable-firewall": true,
"enable-firewall-pbr": false,
"lrouter": "xxxxxxxx-14d6-484d-9494-xxxxxxxxxxxx",
"admin": "up",
"internal_operation": "down",
"urpf-mode": "PORT_CHECK",
"policy uuid": "00000000-0000-0000-0000-000000000000",
"ipns": [
"169.254.1.2"
],
Therefore if the VTI interface is down, the BGP session will be down.
As it is the Standby Tier 0 logical router, we expect IPSEC VPN not to be up on Standby Tier 0 logical router and therefore do not generate a IPSEC VPN alarm, this issue here is that BGP still checks and generates an alarm.