BGP/6/BGP_ROA_OUTPUT_CHECK

Message

BGP/6/BGP_ROA_OUTPUT_CHECK: The checking result of export ROA is failed. (InstanceName=[InstanceName],VPNInstance=[VPNInstance],AddrFamilyAfi=[AddrFamilyAfi],AddrFamilySafi=[AddrFamilySafi])

Description

The ROA check fails when BGP sends routes to an EBGP peer.

Parameters

Parameter Name	Parameter Meaning
InstanceName	BGP instance name. "-" indicates the default BGP instance, and other values indicate multiple instances.
VPNInstance	Name of a VPN instance.
AddrFamilyAfi	Address family.
AddrFamilySafi	Sub-address family.

Possible Causes

The source AS of the route does not exist in the ROA database.

Procedure

If the ROA check fails, the source AS is at risk. To ensure security, the route is not sent to EBGP peers.