BGP BFD from Edgerouter to Juniper SRX, session won't stay up.

Hi,

Pulling my hair out trying to keep BFD up between my edgerouter lite and Juniper SRX.  The Edgerouter lite works fine running BFD to a Mikrotik device I have.

It seems BFD initially comes up for very short instance, then the Juniper brings it down again.  The timers seem to be initially negotiated correctly, but then suddenly change / go out of sync and BFD signals to drop and BGP then drops.

Looking at the juniper logs doesn't show much, just that it has signalled a protocol indpendent down event.

also wireshark seems to show it working for the first few packets then decides to drop the session.

I've flood pinged between the two devices don't get any drops out of 100,000's of packets, also firewall zone allows all in to local on the edgerouter and same for the security zone on the SRX - BFD explicitly permitted under zone and sub interface.

Initially comes up (rx 250, tx 250, multiplier 3)



Then goes down:



Config as follows:

jon@m87-edgerouter-fw# show
 interface eth1 {
     echo {
         interval 250
     }
     enable
     interval 250 {
         minrx 250 {
             multiplier 3
         }
     }
 }

neighbor 192.168.66.2 {
     default-originate {
         route-map def-orig
     }
     fall-over {
         bfd {
         }
     }
     nexthop-self
     remote-as 65400
     route-map {
         export bgp-out-srx
     }
     update-source 192.168.66.1
 }

SRX

root@srx-220-fw# show 
bfd-liveness-detection {
    minimum-interval 250;
    minimum-receive-interval 250;
    multiplier 3;
    transmit-interval {
        minimum-interval 250;
    }
}
group Internet_Edge_65400 {
    type internal;
    description "Used to received default route from Edgerouter Firewall";
    export bgp-edge-out;
    local-as 65400;
    neighbor 192.168.66.1 {
        local-address 192.168.66.2;
        log-updown;
        peer-as 65400;
    }
}