Re: [j-nsp] OSPF ExStart problems between Zebra and Juniper Routers

From: thomas cp lee (lee@fr.clara.net)
Date: Fri Mar 08 2002 - 11:11:11 EST


On Fri, Mar 08, 2002 at 10:54:56AM -0500, Matt Kolon a ecrit:
> I have OSPF running between JUNOS and zebra, and it works fine (to the
> extent that zebra ever works fine...) I won't include the configs, because
> they are really basic area 0 stuff - no changed mtus, etc.
>
Do you have authentication between the Zebra and the Juniper?

> Isn't that an OSPF auth failure in your log below?
>
It could be. But I find it weird that it succeeds in authenticating with
the Cisco, but not with the Juniper. I'm now trying a new area between
the Zebra and the Juniper, without authentication, to see if it reaches Full.

 Address Interface State ID Pri
 Dead
 192.168.0.1 fe-0/3/0.0 Full 10.0.0.1 130 38
 192.168.0.3 fe-0/3/0.0 Exchange 10.0.0.3 0 39

For double amusement, the OSPF on the Juniper has moved to now being
stuck in state: Exchange :) (still in ExStart on the Zebra though).

Thanks greatly for your advice.

Tom

> /matt
>
> On 3/8/02 10:27 AM, "Paul Goyette" <pgoyette@juniper.net> wrote:
>
> > "Stuck in ExStart" usually indicates a mismatch MTU problem.
> >
> > -----Original Message-----
> > From: thomas cp lee [mailto:lee@fr.clara.net]
> > Sent: Friday, March 08, 2002 7:00 AM
> > To: juniper-nsp@puck.nether.net
> > Subject: [j-nsp] OSPF ExStart problems between Zebra and Juniper Routers
> >
> >
> > Howdy Folks,
> >
> > I m trying to make OSPF work between a Zebra FreeBSD router and an M10
> > Juniper, without success.
> >
> > The drama takes place on a LAN, where I have a Cisco 7200 besides the Zebra
> > and the Cisco.
> > Everything seems fine between the Cisco and the Juniper on the one hand, and
> > between the Cisco and the Zebra on the other hand.
> > However, the Zebra and Juniper routers are stuck in the "ExStart" phase.
> >
> > Has anyone managed to make Juniper/Zebra interoperate? Do you have any idea
> > what could be wrong ?
> >
> > The best I could find that is looking similar to my problem is:
> > http://www.cisco.com/warp/public/104/12.html
> > but the Juniper and the Zebra both report a 1500 bytes MTU on the interface,
> > so it must be something else.
> >
> > Cheers,
> >
> > Tom (and Arnaud)
> >
> > These are the IPs (changed) :
> > - Cisco loopback : 10.0.0.1
> > - Juniper loopback : 10.0.0.2
> > - Zebra loopback : 10.0.0.3
> > - Cisco LAN : 192.168.0.1
> > - Juniper LAN : 192.168.0.2
> > - Zebra LAN : 192.168.0.3
> >
> > * Zebra "sh ip ospf neighbor"
> >
> > Neighbor ID Pri State Dead Time Address
> > Interface RXmtL RqstL DBsmL
> >
> > 10.0.0.1 10 Full/Backup 00:00:38 192.168.0.1
> > fxp0:192.168.0.3 0 0 0
> >
> > 10.0.0.2 128 ExStart/DR 00:00:34 192.168.0.2
> > fxp0:192.168.0.3 0 0
> >
> > * Juniper "show ospf neighbor"
> > Address Interface State ID Pri
> > Dead
> > 192.168.0.1 fe-0/3/0.0 Full 10.0.0.1 130 38
> > 192.168.0.3 fe-0/3/0.0 ExStart 10.0.0.3 0 39
> >
> > * Juniper log
> >
> > Mar 8 13:32:19 OSPF packet ignored: authentication failure (bad cksum).
> > Mar 8 13:32:19 OSPF packet ignored: authentication failure from
> > 192.168.0.3
> > Mar 8 13:32:19 OSPF rcvd DbD 192.168.0.3 -> 192.168.0.2 (fe-0/3/0.0)
> > Mar 8 13:32:19 Version 2, length 32, ID 10.0.0.3, area 0.0.0.0
> > Mar 8 13:32:19 checksum 0x0, authtype 2
> > Mar 8 13:32:19 options 0x2, i 1, m 1, ms 1, seq 0x3c88956a, mtu 1500
> > Mar 8 13:32:19 OSPF packet ignored: no matching interface from
> > 192.168.0.3
> >
> > * Zebra log (debug hello,NSM)
> > 2002/03/08 13:36:10 OSPF: make_hello: options: 2, int: fxp0:192.168.0.3
> > 2002/03/08 13:36:10 OSPF: Hello sent to [224.0.0.5] via
> > [fxp0:192.168.0.3].
> > 2002/03/08 13:36:12 OSPF: couldn't find any VL to associate the packet
> > with
> > 2002/03/08 13:36:12 OSPF: Packet[DD]: Negotiation fails, packet
> > discarded.
> > 2002/03/08 13:36:14 OSPF: NSM[fxp0:192.168.0.3:192.168.0.2]: Timer (DD
> > Retransmit timer expire)
> > 2002/03/08 13:36:16 OSPF: couldn't find any VL to associate the packet
> > with
> > 2002/03/08 13:36:16 OSPF: Packet[DD]: Negotiation fails, packet
> > discarded.
> > 2002/03/08 13:36:16 OSPF: Hello received from [10.0.0.2] via
> > [fxp0:192.168.0.3]
> > 2002/03/08 13:36:16 OSPF: src [192.168.0.2],
> > 2002/03/08 13:36:16 OSPF: dst [224.0.0.5]
> > 2002/03/08 13:36:16 OSPF: interface fxp0:192.168.0.3: ospf_read md5
> > authentication failed.
> > 2002/03/08 13:36:18 OSPF: Hello received from [10.0.0.1] via
> > [fxp0:192.168.0.3]
> > n1
> > 2002/03/08 13:36:18 OSPF: src [192.168.0.1],
> > 2002/03/08 13:36:18 OSPF: dst [224.0.0.5]
> > 2002/03/08 13:36:18 OSPF: Packet 10.0.0.1 [Hello:RECV]: Options
> > *|*|-|-|-|-|E|*
> > 2002/03/08 13:36:18 OSPF: NSM[fxp0:192.168.0.3:10.0.0.1]: Full
> > (HelloReceived)
> > 2002/03/08 13:36:18 OSPF: NSM[fxp0:192.168.0.3:10.0.0.1]: nsm_ignore
> > called
> > 2002/03/08 13:36:18 OSPF: NSM[fxp0:192.168.0.3:10.0.0.1]: Full
> > (2-WayReceived)
> >
> > * Zebra OSPF interface configuration
> >
> > interface fxp0
> > ip ospf message-digest-key 1 md5 xxx
> > ip ospf priority 0
> >
> > * Zebra OSPF configuration
> >
> > router ospf
> > ospf router-id 10.0.0.3
> > network 10.0.0.3/32 area 0
> > network 192.168.0.0/24 area 0
> > area 0 authentication message-digest
> >
> > * Juniper OSPF interface configuration
> > interface fe-0/3/0.0 {
> > authentication-key "encrypted key" key-id 1;
> > }
> >
> >
> > --
> > Thomas CP Lee
> > Systemes/Reseaux
> > fr.clara.net
> >
> >
>

-- 
Thomas CP Lee
Systemes/Reseaux
fr.clara.net 



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:39 EDT