[c-nsp] ISIS Adj-filter problem

[Ibrahim Abo Zaid]

Hi All

I was testing ISIS Adj-filter option , R1,R2 and R3 are connected over
ethernet switch (using dynamips) with the below configuration

the configuration works for adj point and both R2 and R3 have ADJ with R1
only , the problem is R2 is droping R1 and R3 LSPs and debug shows it is
dropped due to invalid adj . can you help to resolve that ?

Configuration

R1
interface Loopback0
 ip address 10.10.1.1 255.255.255.255
!
interface FastEthernet0/0
 ip address 10.10.123.1 255.255.255.0
 ip router isis

router isis
 net 49.0001.0000.0000.0001.00
 is-type level-1
 passive-interface Loopback0

R2
interface Loopback0
 ip address 10.10.2.2 255.255.255.255
!
interface FastEthernet0/0
 ip address 10.10.123.2 255.255.255.0
 ip router isis
 isis adjacency-filter A1
!
  router isis
 net 49.0001.0000.0000.0002.00
 is-type level-1
 passive-interface Loopback0

clns filter-set A1 permit 49.0001.0000.0000.0100.00

R3

interface Loopback0
 ip address 10.10.3.3 255.255.255.255
!
interface FastEthernet0/0
 ip address 10.10.123.3 255.255.255.0
 ip router isis
 isis adjacency-filter A1


router isis
 net 49.0001.0000.0000.0003.00
 is-type level-1
 passive-interface Loopback0

 clns filter-set A1 permit 49.0001.0000.0000.0100.00


verification


R1#sh clns neighbors
System Id      Interface   SNPA                State  Holdtime  Type
Protocol
R2             Fa0/0       c201.0544.0000      Up     8         L1   IS-IS
R3             Fa0/0       c202.0544.0000      Up     7         L1   IS-IS

R1 has R2 and R3 LSPs

R1#sh isis database
IS-IS Level-1 Link State Database:
LSPID                 LSP Seq Num  LSP Checksum  LSP Holdtime      ATT/P/OL
R1.00-00            * 0x00000010   0x2D88        849               0/0/0
R2.00-00              0x00000009   0x8037        1036              0/0/0
R2.01-00              0x00000003   0x78D8        1036              0/0/0
R3.00-00              0x00000005   0x4470        552               0/0/0
R3.01-00              0x00000006   0x78D3        1091              0/0/0

but has R3-Lo0 route ONLY !!

R1#sh ip route isis
     10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
i L1    10.10.3.3/32 [115/10] via 10.10.123.3, FastEthernet0/0

R2#sh clns neighbors
System Id      Interface   SNPA                State  Holdtime  Type
Protocol
R1             Fa0/0       c200.0544.0000      Up     21        L1   IS-IS

R2 don't have R1 and R3 LSPs !!!


R2#sh isis database
IS-IS Level-1 Link State Database:
LSPID                 LSP Seq Num  LSP Checksum  LSP Holdtime      ATT/P/OL
R2.00-00            * 0x00000009   0x8037        985               0/0/0
R2.01-00            * 0x00000003   0x78D8        986               0/0/0

NO ISIS Route  , it normal no LSP :)
R2#sh ip route isis
R2#

R3

R3#sh clns neighbors
System Id      Interface   SNPA                State  Holdtime  Type
Protocol
R1             Fa0/0       c200.0544.0000      Up     26        L1   IS-IS

R3#sh isis database
IS-IS Level-1 Link State Database:
LSPID                 LSP Seq Num  LSP Checksum  LSP Holdtime      ATT/P/OL
R1.00-00              0x00000013   0x278B        1181              0/0/0
R2.00-00              0x00000009   0x8037        845               0/0/0
R2.01-00              0x00000003   0x78D8        846               0/0/0
R3.00-00            * 0x00000006   0x4271        1186              0/0/0
R3.01-00            * 0x00000007   0x76D4        1185              0/0/0

route to R1-Lo0 only !!

R3#sh ip route isis
     10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
i L1    10.10.1.1/32 [115/10] via 10.10.123.1, FastEthernet0/0

debug isis update-packets shows update is dropped due to invalid ADJ


*Mar  1 00:30:16.751: ISIS-Upd: Invalid adjacency
*Mar  1 00:30:26.619: ISIS-Upd: Invalid adjacency
*Mar  1 00:30:34.151: ISIS-Upd: Invalid adjacency

any ideas

best regards
--Ibrahim