<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">ip/ipv6 mtu on the interface doesn’t have any impact on the OSPF frames since they’re purely layer 2. Check </div><div class=""><br class=""></div><div class=""><font face="Courier New" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>default-max-frame-size 9216<br class=""></font><br class=""></div><div class="">in your config. I’m not sure if there’s a way to specifically limit the OSPF frame size. </div><div class=""><br class=""></div><div class=""> </div><div class="">Regards,</div><div class="">Mike</div><div class=""><br class=""></div><br class=""><div><blockquote type="cite" class=""><div class="">On Mar 21, 2016, at 7:24 PM, Howard, Christopher <<a href="mailto:Christopher-Howard@utc.edu" class="">Christopher-Howard@utc.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Thanks for the reply and confirmation. I tried the mtu settings on the Brocade side, but because they are default they don’t show in the running config (this is an ICX).
<div class=""><br class="">
</div>
<div class="">I'm using vrf-lite in this instance. I started on a vrf, which maybe I shouldn’t have. I tried the exact same config in the default vrf and it works perfectly. However, in a non-default vrf it doesn’t. Maybe I’m overlooking something, I’ll
keep digging.<br class="">
<div class=""><br class="Apple-interchange-newline">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">-Christopher</span>
</div>
<br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On Mar 21, 2016, at 9:05 PM, David Hubbard <<a href="mailto:dhubbard@dino.hostasaurus.com" class="">dhubbard@dino.hostasaurus.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class="">
<div class="">
<div class="">I’ve got some MLXe’s talking to ASR’s with ospf/ospfv3. I do seem to have a hard coded MTU in there but can’t remember why. On the brocade side, ve interface:</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""> ip mtu 1500</div>
<div class=""> ip ospf area 0</div>
<div class=""> ip ospf md5-authentication key-id 111 key 1 yyyyyyy</div>
</div>
<div class=""> ipv6 mtu 1500</div>
<div class="">
<div class=""> ipv6 ospf area 0</div>
</div>
<div class="">
<div class=""> ipv6 ospf authentication ipsec spi 222 esp sha1 encryptb64 xxxxxxx</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">And on the cisco side vlan interface:</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""> ip ospf authentication message-digest</div>
<div class=""> ip ospf message-digest-key 111 md5 7 yyyyyyy</div>
<div class=""> ip ospf 65535 area 0</div>
</div>
<div class="">
<div class=""> ipv6 ospf authentication null</div>
<div class=""> ipv6 ospf 65535 area 0</div>
<div class=""> ipv6 ospf encryption ipsec spi 222 esp null sha1 7 xxxxxx</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div id="MAC_OUTLOOK_SIGNATURE" class=""></div>
</div>
</div>
<div class=""><br class="">
</div>
<span id="OLK_SRC_BODY_SECTION" class="">
<div style="font-family: Calibri; font-size: 12pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);" class="">
<span style="font-weight:bold" class="">From: </span>foundry-nsp <<a href="mailto:foundry-nsp-bounces@puck.nether.net" class="">foundry-nsp-bounces@puck.nether.net</a>> on behalf of "Howard, Christopher" <<a href="mailto:Christopher-Howard@utc.edu" class="">Christopher-Howard@utc.edu</a>><br class="">
<span style="font-weight:bold" class="">Date: </span>Monday, March 21, 2016 at 8:40 PM<br class="">
<span style="font-weight:bold" class="">To: </span>foundry-nsp <<a href="mailto:foundry-nsp@puck.nether.net" class="">foundry-nsp@puck.nether.net</a>><br class="">
<span style="font-weight:bold" class="">Subject: </span>[f-nsp] IPv6 OSPFv3 Brocade to Cisco<br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
I’m having trouble getting OSPFv3 up between a Brocade ICX7750 and a Cisco 4500X. I’ve found on cisco-nsp where someone else found a working config using the following:
<div class="">
<pre class="">Brocade side:
ipv6 ospf authentication ipsec spi #### esp sha1 KEY
Cisco side:
ipv6 ospf authentication null
ipv6 ospf encryption ipsec spi #### esp null sha1 KEY</pre>
<div class="">Well, I’m already doing OSPFv3 between Brocades using the exact line in the example, which is good. I also have OSPFv3 neighbors up with our firewall (not Cisco). However, when I use the Cisco side of the example I don’t get a successful neighbor.
On the Brocade side, I see a neighbor in the neighbor table, but it’s stuck in INIT state. On the Cisco side, the neighbor table is empty.</div>
<div class=""><br class="">
</div>
<div class="">Normally when it’s stuck in INIT state, I’d check MTU sizes and general connectivity between both sides. Both are 1500 bytes and both sides can ping each other.</div>
<div class=""><br class="">
</div>
<div class="">Does any one have any ideas as to what I can look at next, or if they have a working config that’s different from mine? I can’t remove the authentication without having to clear that out of my network everywhere. </div>
<div class=""><br class="Apple-interchange-newline">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">-Christopher</span></div>
<br class="">
</div>
</div>
</div>
</span></div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
_______________________________________________<br class="">foundry-nsp mailing list<br class=""><a href="mailto:foundry-nsp@puck.nether.net" class="">foundry-nsp@puck.nether.net</a><br class="">http://puck.nether.net/mailman/listinfo/foundry-nsp</div></blockquote></div><br class=""><div class="">
<span class="Apple-style-span" style="border-collapse: separate; line-height: normal; border-spacing: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; " class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; " class="">*----------- H U R R I C A N E - E L E C T R I C ---------->><br class="">| Mike Tindle | Senior Network Engineer | <a href="mailto:mtindle@he.net" class="">mtindle@he.net</a><br class="">| ASN 6939 | <a href="http://www.he.net" class="">http://www.he.net</a> | 510-580-4126<br class="">*--------------------------------------------------->></div></span></div></span>
</div>
<br class=""></body></html>