Re: [j-nsp] OSPF ExStart problems between Zebra and Juniper Routers

From: Josef Buchsteiner (josefb@juniper.net)
Date: Fri Mar 08 2002 - 10:29:10 EST


from the log it clearly says that it is an authentication
problem. What I miss on your Juniper configuration is
set protocols ospf area 0 authentication-type md5

regards
Josef

At 04:00 PM 3/8/2002, thomas cp lee wrote:
>Howdy Folks,
>
>I m trying to make OSPF work between a Zebra FreeBSD router and an M10
>Juniper, without success.
>
>The drama takes place on a LAN, where I have a Cisco 7200 besides the
>Zebra and the Cisco.
>Everything seems fine between the Cisco and the Juniper on the one hand,
>and between the Cisco and the Zebra on the other hand.
>However, the Zebra and Juniper routers are stuck in the "ExStart" phase.
>
>Has anyone managed to make Juniper/Zebra interoperate? Do you have any
>idea what could be wrong ?
>
>The best I could find that is looking similar to my problem is:
>http://www.cisco.com/warp/public/104/12.html
>but the Juniper and the Zebra both report a 1500 bytes MTU on the
>interface, so it must be something else.
>
>Cheers,
>
>Tom (and Arnaud)
>
>These are the IPs (changed) :
>- Cisco loopback : 10.0.0.1
>- Juniper loopback : 10.0.0.2
>- Zebra loopback : 10.0.0.3
>- Cisco LAN : 192.168.0.1
>- Juniper LAN : 192.168.0.2
>- Zebra LAN : 192.168.0.3
>
>* Zebra "sh ip ospf neighbor"
>
>Neighbor ID Pri State Dead Time Address
>Interface RXmtL RqstL DBsmL
>
>10.0.0.1 10 Full/Backup 00:00:38 192.168.0.1
>fxp0:192.168.0.3 0 0 0
>
>10.0.0.2 128 ExStart/DR 00:00:34 192.168.0.2
>fxp0:192.168.0.3 0 0
>
>* Juniper "show ospf neighbor"
> Address Interface State ID Pri
>Dead
>192.168.0.1 fe-0/3/0.0 Full 10.0.0.1 130 38
>192.168.0.3 fe-0/3/0.0 ExStart 10.0.0.3 0 39
>
>* Juniper log
>
>Mar 8 13:32:19 OSPF packet ignored: authentication failure (bad cksum).
>Mar 8 13:32:19 OSPF packet ignored: authentication failure from
>192.168.0.3
>Mar 8 13:32:19 OSPF rcvd DbD 192.168.0.3 -> 192.168.0.2 (fe-0/3/0.0)
>Mar 8 13:32:19 Version 2, length 32, ID 10.0.0.3, area 0.0.0.0
>Mar 8 13:32:19 checksum 0x0, authtype 2
>Mar 8 13:32:19 options 0x2, i 1, m 1, ms 1, seq 0x3c88956a, mtu 1500
>Mar 8 13:32:19 OSPF packet ignored: no matching interface from
>192.168.0.3
>
>* Zebra log (debug hello,NSM)
>2002/03/08 13:36:10 OSPF: make_hello: options: 2, int: fxp0:192.168.0.3
>2002/03/08 13:36:10 OSPF: Hello sent to [224.0.0.5] via
>[fxp0:192.168.0.3].
>2002/03/08 13:36:12 OSPF: couldn't find any VL to associate the packet
>with
>2002/03/08 13:36:12 OSPF: Packet[DD]: Negotiation fails, packet
>discarded.
>2002/03/08 13:36:14 OSPF: NSM[fxp0:192.168.0.3:192.168.0.2]: Timer (DD
>Retransmit timer expire)
>2002/03/08 13:36:16 OSPF: couldn't find any VL to associate the packet
>with
>2002/03/08 13:36:16 OSPF: Packet[DD]: Negotiation fails, packet
>discarded.
>2002/03/08 13:36:16 OSPF: Hello received from [10.0.0.2] via
>[fxp0:192.168.0.3]
>2002/03/08 13:36:16 OSPF: src [192.168.0.2],
>2002/03/08 13:36:16 OSPF: dst [224.0.0.5]
>2002/03/08 13:36:16 OSPF: interface fxp0:192.168.0.3: ospf_read md5
>authentication failed.
>2002/03/08 13:36:18 OSPF: Hello received from [10.0.0.1] via
>[fxp0:192.168.0.3]
>n1
>2002/03/08 13:36:18 OSPF: src [192.168.0.1],
>2002/03/08 13:36:18 OSPF: dst [224.0.0.5]
>2002/03/08 13:36:18 OSPF: Packet 10.0.0.1 [Hello:RECV]: Options
>*|*|-|-|-|-|E|*
>2002/03/08 13:36:18 OSPF: NSM[fxp0:192.168.0.3:10.0.0.1]: Full
>(HelloReceived)
>2002/03/08 13:36:18 OSPF: NSM[fxp0:192.168.0.3:10.0.0.1]: nsm_ignore
>called
>2002/03/08 13:36:18 OSPF: NSM[fxp0:192.168.0.3:10.0.0.1]: Full
>(2-WayReceived)
>
>* Zebra OSPF interface configuration
>
>interface fxp0
> ip ospf message-digest-key 1 md5 xxx
> ip ospf priority 0
>
>* Zebra OSPF configuration
>
>router ospf
> ospf router-id 10.0.0.3
> network 10.0.0.3/32 area 0
> network 192.168.0.0/24 area 0
> area 0 authentication message-digest
>
>* Juniper OSPF interface configuration
> interface fe-0/3/0.0 {
> authentication-key "encrypted key" key-id 1;
> }
>
>
>--
>Thomas CP Lee
>Systemes/Reseaux
>fr.clara.net



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:39 EDT