[j-nsp] Help with OSPF config

[Scott Morris]

Traceoptions will help on Juniper, or "debug ip ospf adjacency" on the Cisco
side.

If you have an authentication mismatch, I don't think you'll even see the
start.   If you get into the EXStart phase and then reset, I'd hover towards
MTU mismatch between the two devices.

You can either fix them, or on the device that has the lower mtu (likely the
Cisco, but unsure of your config!) use "ip ospf mtu-ignore".  If it's the
Juniper side, you can't do anything AFAIK, other than adjusting MTU.

HTH,

Scott 

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Sean Clarke
Sent: Tuesday, February 19, 2008 2:13 AM
To: Matthew Crocker
Cc: Juniper-NSP Mailing list
Subject: Re: [j-nsp] Help with OSPF config


Try turning on some traceoptions in OSPF on the Juniper ... it'll probably
tell you what the problem is ... maybe a typo'ed md5 key, or an unexpected
router-id ?

cheers


Matthew Crocker wrote:
> I need some Juniper-Foo for my OSPF config.
>
>   I have 3 routers connected to a GigE switch.
>
> Router A is a Cisco 12000
> Router B is a Juniper J6350
> Router C is a Redback SE-400
>
> I have A&C talking OSPF and sharing routes just fine.
>
> I have A&B  & C&B complaining about what the Juniper is sending out 
> and shutting it down.
>
> Router B config is
>
> # show protocols ospf
> export export-statics;
> area 0.0.0.0 {
>      authentication-type md5;
>      interface ge-0/0/0.0 {
>          authentication {
>              md5 1 key "$XXXXXXXXXXXXXXXXX"; ## SECRET-DATA
>          }
>      }
> }
>
> Router A config is
> interface GigabitEthernet4/1
>   description Link to CORE-SW-A-Fe-0-1
>   ip address 1.2.3.4 255.255.255.128
>   no ip directed-broadcast
>   ip ospf authentication message-digest
>   ip ospf authentication-key 7 XXXXXXXXXXXXXXX
>   ip ospf message-digest-key 1 md5 7 XXXXXXXXXXXXX
>   no negotiation auto
>
> router ospf 1
>   router-id 204.97.12.4
>   log-adjacency-changes
>   nsf
>   area 0 authentication message-digest
>   redistribute connected subnets
>   redistribute static subnets
>   network 1.2.3.0 0.0.0.255 area 0
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>   

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp