Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Quagga OSPF to Cisco

    pfSense Packages
    4
    8
    6.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      Dmkaz
      last edited by

      Problem I'm having is getting routes redistributed correctly between my pfsense box (2.0.3-RELEASE) and a Cisco 1811 Router. I previously had this working between the Cisco and a Juniper SRX so I can verify the 1811 config is good.

      I get OSPF setup correctly and get a full adjacency. When doing a 'sh ip route' on the 1811, I show no routes from the pfsense box. Alternatively, on the pfsense box it's 'showing' the routes in the status tab but none are added to the routing table.

      Setup:

      Simple area of 0.0.0.0. RID is 6.6.6.6 on the 1811 and 5.5.5.5 on the pfsense.

      I have the 'Redistribute connected subnets' checked in Quagga.

      
             OSPF Router with ID (5.5.5.5)
      
                      Router Link States (Area 0.0.0.0)
      
      Link ID         ADV Router      Age  Seq#       CkSum  Link count
      5.5.5.5         5.5.5.5            3 0x80000004 0xa780 1
      6.6.6.6         6.6.6.6         1115 0x80002be0 0x7f1e 5
      
                      AS External Link States
      
      Link ID         ADV Router      Age  Seq#       CkSum  Route
      0.0.0.0         5.5.5.5            3 0x80000003 0xac06 E2 0.0.0.0/0 [0x0]
      xx.xx.xx.xx  5.5.5.5            3 0x80000003 0x925c E2 xx.xx.xx.xx/29 [0x0]
      172.16.0.0      6.6.6.6         1625 0x80000116 0x83b1 E2 172.16.0.0/25 [0x0]
      172.16.0.128    6.6.6.6         1625 0x80000116 0xff74 E2 172.16.0.128/26 [0x0]
      172.16.10.0     6.6.6.6         1625 0x80000116 0xb703 E2 172.16.10.0/28 [0x0]
      172.16.11.9     6.6.6.6         1007 0x80000001 0xd9dd E2 172.16.11.9/32 [0x0]
      172.16.11.10    6.6.6.6          658 0x80000001 0xcfe6 E2 172.16.11.10/32 [0x0]
      172.16.12.2     6.6.6.6         1625 0x80000116 0xe1c6 E2 172.16.12.2/31 [0x0]
      172.16.50.0     5.5.5.5            3 0x80000003 0x6356 E2 172.16.50.0/24 [0x0]
      172.16.70.0     5.5.5.5            3 0x80000002 0x881e E2 172.16.70.0/24 [0x0]
      172.16.80.0     5.5.5.5            3 0x80000003 0x1883 E2 172.16.80.0/24 [0x0]
      172.16.100.0    6.6.6.6          360 0x80000029 0x0d32 E2 172.16.100.0/24 [0x0]
      172.16.137.0    6.6.6.6         1625 0x80000116 0x9794 E2 172.16.137.0/24 [0x0]
      172.16.150.0    6.6.6.6         1625 0x80000116 0x0817 E2 172.16.150.0/24 [0x0]
      172.16.151.0    6.6.6.6         1625 0x80000116 0xfc21 E2 172.16.151.0/24 [0x0]
      172.16.152.0    6.6.6.6         1625 0x80000116 0xf12b E2 172.16.152.0/24 [0x0]
      172.16.153.0    6.6.6.6         1625 0x80000116 0xe635 E2 172.16.153.0/24 [0x0]
      192.168.7.0     6.6.6.6         1625 0x80000116 0x07fa E2 192.168.7.0/24 [0x0]
      192.168.10.0    6.6.6.6         1625 0x80000116 0xe519 E2 192.168.10.0/24 [0x0]
      192.168.50.0    5.5.5.5            3 0x80000002 0x9082 E2 192.168.50.0/24 [0x0]
      192.168.50.1    5.5.5.5            3 0x80000002 0x868b E2 192.168.50.1/32 [0x0]
      192.168.110.0   6.6.6.6          623 0x80000003 0xbeef E2 192.168.110.0/24 [0x0]
      xx.xx.xx.xx  5.5.5.5            3 0x80000002 0x7fc3 E2 xx.xx.xx.xx/32 [0x0]
      xx.xx.xx.xx  5.5.5.5            3 0x80000003 0x0531 E2 xx.xx.xx.xx/32 [0x0]
      
      

      Any help or direction is appreciated. Cheers!

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        "Redistribute Kernel" is probably closer to what you actually want.

        Orherwise, Make sure your interface(s) with routes you want to send are added as passive interfaces.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • D
          Dmkaz
          last edited by

          jimp,

          Appreciate the advice. I went ahead and checked the redistrib. kernel and added the subnets as passive interfaces. I am now seeing them in the Quagga Routing Table:

          
          ============ OSPF network routing table ============
          N    172.16.50.0/24        [10] area: 0.0.0.0
                                     directly attached to lagg0_vlan30
          N    172.16.60.0/24        [10] area: 0.0.0.0
                                     directly attached to lagg0_vlan60
          N    172.16.70.0/24        [10] area: 0.0.0.0
                                     directly attached to lagg0_vlan80
          N    172.16.80.0/24        [10] area: 0.0.0.0
                                     directly attached to lagg0_vlan90
          
          

          However, On the Cisco side, I am still seeing no routes being added.

          Doing a 'sh ip route' doesn't show any OSPF added routes. However, OSPF does have full adjacency:

          
          Neighbor ID     Pri   State           Dead Time   Address         Interface
          5.5.5.5           0   FULL/  -        00:00:33    172.16.60.1     FastEthernet1
          
          

          OSPF Config on the Cisco Here:

          
          router ospf 2222
           router-id 6.6.6.6
           log-adjacency-changes
           redistribute eigrp 200 subnets
           network 0.0.0.0 255.255.255.255 area 0
          
          
          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            What does the OSPF and Zebra config look like in /usr/local/etc/quagga/ ?

            What does the OSPF status show?

            Any system logs that refer to OSPF?

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • D
              Dmkaz
              last edited by

              So there are no files in /usr/local/etc/quagga

              There is an ospfd.conf file in /usr/local/etc/

              
              router-id 5.5.5.5
              redistribute 172.16.50.0
              redistribute connected
              area 0.0.0.0 {
                      interface lagg0_vlan60
              
              

              Quagga OSPF General

              OSPF Routing Process, Router ID: 5.5.5.5
               Supports only single TOS (TOS0) routes
               This implementation conforms to RFC2328
               RFC1583Compatibility flag is disabled
               OpaqueCapability flag is disabled
               Initial SPF scheduling delay 200 millisec(s)
               Minimum hold time between consecutive SPFs 1000 millisec(s)
               Maximum hold time between consecutive SPFs 10000 millisec(s)
               Hold time multiplier is currently 1
               SPF algorithm last executed 3.470s ago
               SPF timer is inactive
               Refresh timer 10 secs
               This router is an ASBR (injecting external routing information)
               Number of external LSA 17\. Checksum Sum 0x00080fe4
               Number of opaque AS LSA 0\. Checksum Sum 0x00000000
               Number of areas attached to this router: 1
               All adjacency changes are logged
              
               Area ID: 0.0.0.0 (Backbone)
                 Number of interfaces in this area: Total: 2, Active: 2
                 Number of fully adjacent neighbors in this area: 1
                 Area has no authentication
                 SPF algorithm executed 3 times
                 Number of LSA 2
                 Number of router LSA 2\. Checksum Sum 0x0001244c
                 Number of network LSA 0\. Checksum Sum 0x00000000
                 Number of summary LSA 0\. Checksum Sum 0x00000000
                 Number of ASBR summary LSA 0\. Checksum Sum 0x00000000
                 Number of NSSA LSA 0\. Checksum Sum 0x00000000
                 Number of opaque link LSA 0\. Checksum Sum 0x00000000
                 Number of opaque area LSA 0\. Checksum Sum 0x00000000
              

              Quagga OSPF Neighbor Info

              
               Neighbor ID Pri State           Dead Time Address         Interface            RXmtL RqstL DBsmL
              6.6.6.6           1 Full/DR           39.924s 172.16.60.2     lagg0_vlan60:172.16.60.1     0     0     0
              

              Ton of these in the Sys Log:

              ospfd[6765]: Vty connection from 127.0.0.1
              ospfd[6765]: LSA[Type5:0.0.0.0]: Not originate AS-external-LSA for default
              ospfd[6765]: nsm_change_state(6.6.6.6, Loading -> Full): scheduling new router-LSA origination
              
              

              Thanks Again

              1 Reply Last reply Reply Quote 0
              • A
                arthurbrownleeiv
                last edited by

                I've got some similar issues, however I'm having to deal with XO on an MPLS for exchanging routes.

                On one unit, I can get the OSPF routes added to the kernel routing table, but the other two units will never add the routes to the kernel routing table, even though they're setup the same.

                Not to dirty up this thread, but I'm subscribing since this seems to be close to my issues as well.

                1 Reply Last reply Reply Quote 0
                • G
                  Gloom
                  last edited by

                  Try binding to the phyical interface rather than  lagg0

                  Never underestimate the power of human stupidity

                  1 Reply Last reply Reply Quote 0
                  • D
                    Dmkaz
                    last edited by

                    Just an update here:

                    I went ahead and moved to new gear and separated out each vlan on it's own interface.

                    Upon firing up OSPF again, the same issue prevails. I get the routes from the Cisco 1811 and shows as "FULL". Doing same 'sh ip route' in the Cisco side and it doesn't see any redistributed routes from the pfsense side.

                    Any ideas?

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.