[c-nsp] ISIS Adj-filter problem

[Dave Kruger]

Hi there

have u managed to figure out what was causing that?

Did you see that your clns filter references

49.0001.0000.0000.0100.00


where as your R1 router's Sys ID is

49.0001.0000.0000.0001.00


Regards,
Dave

Ibrahim Abo Zaid wrote:
> Hi All
>
> I was testing ISIS Adj-filter option , R1,R2 and R3 are connected over
> ethernet switch (using dynamips) with the below configuration
>
> the configuration works for adj point and both R2 and R3 have ADJ with R1
> only , the problem is R2 is droping R1 and R3 LSPs and debug shows it is
> dropped due to invalid adj . can you help to resolve that ?
>
> Configuration
>
> R1
> interface Loopback0
>  ip address 10.10.1.1 255.255.255.255
> !
> interface FastEthernet0/0
>  ip address 10.10.123.1 255.255.255.0
>  ip router isis
>
> router isis
>  net 
>   

>  is-type level-1
>  passive-interface Loopback0
>
> R2
> interface Loopback0
>  ip address 10.10.2.2 255.255.255.255
> !
> interface FastEthernet0/0
>  ip address 10.10.123.2 255.255.255.0
>  ip router isis
>  isis adjacency-filter A1
> !
>   router isis
>  net 49.0001.0000.0000.0002.00
>  is-type level-1
>  passive-interface Loopback0
>
> clns filter-set A1 permit 49.0001.0000.0000.0100.00
>
> R3
>
> interface Loopback0
>  ip address 10.10.3.3 255.255.255.255
> !
> interface FastEthernet0/0
>  ip address 10.10.123.3 255.255.255.0
>  ip router isis
>  isis adjacency-filter A1
>
>
> router isis
>  net 49.0001.0000.0000.0003.00
>  is-type level-1
>  passive-interface Loopback0
>
>  clns filter-set A1 permit 49.0001.0000.0000.0100.00
>
>
> verification
>
>
> R1#sh clns neighbors
> System Id      Interface   SNPA                State  Holdtime  Type
> Protocol
> R2             Fa0/0       c201.0544.0000      Up     8         L1   IS-IS
> R3             Fa0/0       c202.0544.0000      Up     7         L1   IS-IS
>
> R1 has R2 and R3 LSPs
>
> R1#sh isis database
> IS-IS Level-1 Link State Database:
> LSPID                 LSP Seq Num  LSP Checksum  LSP Holdtime      ATT/P/OL
> R1.00-00            * 0x00000010   0x2D88        849               0/0/0
> R2.00-00              0x00000009   0x8037        1036              0/0/0
> R2.01-00              0x00000003   0x78D8        1036              0/0/0
> R3.00-00              0x00000005   0x4470        552               0/0/0
> R3.01-00              0x00000006   0x78D3        1091              0/0/0
>
> but has R3-Lo0 route ONLY !!
>
> R1#sh ip route isis
>      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
> i L1    10.10.3.3/32 [115/10] via 10.10.123.3, FastEthernet0/0
>
> R2#sh clns neighbors
> System Id      Interface   SNPA                State  Holdtime  Type
> Protocol
> R1             Fa0/0       c200.0544.0000      Up     21        L1   IS-IS
>
> R2 don't have R1 and R3 LSPs !!!
>
>
> R2#sh isis database
> IS-IS Level-1 Link State Database:
> LSPID                 LSP Seq Num  LSP Checksum  LSP Holdtime      ATT/P/OL
> R2.00-00            * 0x00000009   0x8037        985               0/0/0
> R2.01-00            * 0x00000003   0x78D8        986               0/0/0
>
> NO ISIS Route  , it normal no LSP :)
> R2#sh ip route isis
> R2#
>
> R3
>
> R3#sh clns neighbors
> System Id      Interface   SNPA                State  Holdtime  Type
> Protocol
> R1             Fa0/0       c200.0544.0000      Up     26        L1   IS-IS
>
> R3#sh isis database
> IS-IS Level-1 Link State Database:
> LSPID                 LSP Seq Num  LSP Checksum  LSP Holdtime      ATT/P/OL
> R1.00-00              0x00000013   0x278B        1181              0/0/0
> R2.00-00              0x00000009   0x8037        845               0/0/0
> R2.01-00              0x00000003   0x78D8        846               0/0/0
> R3.00-00            * 0x00000006   0x4271        1186              0/0/0
> R3.01-00            * 0x00000007   0x76D4        1185              0/0/0
>
> route to R1-Lo0 only !!
>
> R3#sh ip route isis
>      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
> i L1    10.10.1.1/32 [115/10] via 10.10.123.1, FastEthernet0/0
>
> debug isis update-packets shows update is dropped due to invalid ADJ
>
>
> *Mar  1 00:30:16.751: ISIS-Upd: Invalid adjacency
> *Mar  1 00:30:26.619: ISIS-Upd: Invalid adjacency
> *Mar  1 00:30:34.151: ISIS-Upd: Invalid adjacency
>
> any ideas
>
> best regards
> --Ibrahim
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>