Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Quagga OSPF not changing kernel routes

    Routing and Multi WAN
    2
    3
    2.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zxsavage
      last edited by

      Hello!

      Quagga  not changing kernel routes. I see immediate changes on link status change and correct routes in Quagga OSPF, but no changes in system routes (Diagnostics - Routes).

      Routers links are OpenVPN Site-to-site.
      Connected networks (LAN) Router ID 1.1.1.1N Network 192.168.N.0/24

      For example look at 1.1.1.13 and 1.1.1.12. From the diagram we should say that they interact via 172.18.3.200/30 with cost 15. Quagga agree with us. But in real they interact through router 1.1.1.10 because kernel routes not in actual state.

      kernel route 192.168.2.0/24 via 172.18.3.1 - cost 20
      Quagga route 192.168.2.0/24 via 172.18.3.101 - cost 15, direct link

      Here are config of 1.1.1.13 and logs

      
Quagga ospfd.conf

# This file was created by the pfSense package manager.  Do not edit!

password zebra
log syslog
interface hn0
interface ovpnc2
  ip ospf network point-to-point
  ip ospf cost 10
interface ovpnc5
  ip ospf network point-to-point
  ip ospf cost 15
interface ovpnc7
  ip ospf network point-to-point
  ip ospf cost 15
interface ovpnc8
  ip ospf network point-to-point
  ip ospf cost 15

router ospf
  ospf router-id 1.1.1.13
  log-adjacency-changes detail
  passive-interface hn0
  network 192.168.3.0/24 area 0.0.0.0
  network 172.18.3.0/30 area 0.0.0.0
  network 172.18.3.4/30 area 0.0.0.0
  network 172.18.3.100/30 area 0.0.0.0
  network 172.18.3.200/30 area 0.0.0.0

Quagga zebra.conf

# This file was created by the pfSense package manager.  Do not edit!

password zebra
log syslog

Quagga OSPF Neighbors

    Neighbor ID Pri State           Dead Time Address         Interface            RXmtL RqstL DBsmL
1.1.1.10          1 Full/DROther      36.310s 172.18.3.1      ovpnc2:172.18.3.2        0     0     0
1.1.1.10          1 Full/DROther      36.372s 172.18.3.5      ovpnc5:172.18.3.6        0     0     0
1.1.1.12          1 Full/DROther      32.118s 172.18.3.101    ovpnc7:172.18.3.102      0     0     0
1.1.1.11          1 Full/DROther      37.651s 172.18.3.201    ovpnc8:172.18.3.202      0     0     0

Quagga OSPF Routes

============ OSPF network routing table ============
N    172.17.1.0/24         [20] area: 0.0.0.0
                           via 172.18.3.1, ovpnc2
N    172.18.1.0/30         [20] area: 0.0.0.0
                           via 172.18.3.1, ovpnc2
N    172.18.1.4/30         [25] area: 0.0.0.0
                           via 172.18.3.1, ovpnc2
N    172.18.2.0/30         [20] area: 0.0.0.0
                           via 172.18.3.1, ovpnc2
N    172.18.2.4/30         [25] area: 0.0.0.0
                           via 172.18.3.1, ovpnc2
N    172.18.3.0/30         [10] area: 0.0.0.0
                           directly attached to ovpnc2
N    172.18.3.4/30         [15] area: 0.0.0.0
                           directly attached to ovpnc5
N    172.18.3.100/30       [15] area: 0.0.0.0
                           directly attached to ovpnc7
N    172.18.3.200/30       [15] area: 0.0.0.0
                           directly attached to ovpnc8
N    192.168.0.0/24        [20] area: 0.0.0.0
                           via 172.18.3.1, ovpnc2
N    192.168.1.0/24        [25] area: 0.0.0.0
                           via 172.18.3.201, ovpnc8
N    192.168.2.0/24        [25] area: 0.0.0.0
                           via 172.18.3.101, ovpnc7
N    192.168.3.0/24        [10] area: 0.0.0.0
                           directly attached to hn0

============ OSPF router routing table =============

============ OSPF external routing table ===========

Log at service start:
Nov 17 12:39:40 pfsense-cot zebra[99658]: Zebra 1.0.20160315 starting: vty@2601
Nov 17 12:39:40 pfsense-cot ospfd[99839]: OSPFd 1.0.20160315 starting: vty@2604
Nov 17 12:39:40 pfsense-cot zebra[99658]: client 13 says hello and bids fair to announce only ospf routes
Nov 17 12:39:40 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:40 pfsense-cot ospfd[99839]: interface 172.18.3.2 [8] join AllSPFRouters Multicast group.
Nov 17 12:39:40 pfsense-cot ospfd[99839]: SPF: Scheduled in 50 msec
Nov 17 12:39:40 pfsense-cot ospfd[99839]: interface 172.18.3.6 [9] join AllSPFRouters Multicast group.
Nov 17 12:39:40 pfsense-cot ospfd[99839]: interface 172.18.3.102 [10] join AllSPFRouters Multicast group.
Nov 17 12:39:40 pfsense-cot ospfd[99839]: interface 172.18.3.202 [11] join AllSPFRouters Multicast group.
Nov 17 12:39:40 pfsense-cot ospfd[99839]: Link State Update: Unknown Neighbor 1.1.1.12 on int: ovpnc7:172.18.3.102
Nov 17 12:39:40 pfsense-cot ospfd[99839]: Link State Update: Unknown Neighbor 1.1.1.10 on int: ovpnc5:172.18.3.6
Nov 17 12:39:40 pfsense-cot ospfd[99839]: Link State Update: Unknown Neighbor 1.1.1.10 on int: ovpnc5:172.18.3.6
Nov 17 12:39:41 pfsense-cot ospfd[99839]: SPF Processing Time(usecs): External Routes: 14
Nov 17 12:39:41 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc5:172.18.3.6: Down -> Init (PacketReceived)
Nov 17 12:39:41 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc5:172.18.3.6: Init -> ExStart (2-WayReceived)
Nov 17 12:39:41 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc2:172.18.3.2: Down -> Init (PacketReceived)
Nov 17 12:39:41 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc2:172.18.3.2: Init -> ExStart (2-WayReceived)
Nov 17 12:39:41 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.10: Initial DBD from Slave, ignoring.
Nov 17 12:39:41 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.10 Negotiation done (Master).
Nov 17 12:39:41 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc5:172.18.3.6: ExStart -> Exchange (NegotiationDone)
Nov 17 12:39:42 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.10: Initial DBD from Slave, ignoring.
Nov 17 12:39:42 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.10 Negotiation done (Master).
Nov 17 12:39:42 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc2:172.18.3.2: ExStart -> Exchange (NegotiationDone)
Nov 17 12:39:42 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:42 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc5:172.18.3.6: Exchange -> Loading (ExchangeDone)
Nov 17 12:39:42 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:42 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc5:172.18.3.6: Loading -> Full (LoadingDone)
Nov 17 12:39:42 pfsense-cot ospfd[99839]: nsm_change_state(1.1.1.10, Loading -> Full): scheduling new router-LSA origination
Nov 17 12:39:42 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.10 on ovpnc2:172.18.3.2: Exchange -> Full (ExchangeDone)
Nov 17 12:39:42 pfsense-cot ospfd[99839]: nsm_change_state(1.1.1.10, Exchange -> Full): scheduling new router-LSA origination
Nov 17 12:39:42 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:43 pfsense-cot ospfd[99839]: SPF Processing Time(usecs): External Routes: 9
Nov 17 12:39:43 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.11 on ovpnc8:172.18.3.202: Down -> Init (PacketReceived)
Nov 17 12:39:43 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.11 on ovpnc8:172.18.3.202: Init -> ExStart (2-WayReceived)
Nov 17 12:39:43 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.11: Initial DBD from Slave, ignoring.
Nov 17 12:39:43 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.11 Negotiation done (Master).
Nov 17 12:39:43 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.11 on ovpnc8:172.18.3.202: ExStart -> Exchange (NegotiationDone)
Nov 17 12:39:43 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.11 on ovpnc8:172.18.3.202: Exchange -> Full (ExchangeDone)
Nov 17 12:39:43 pfsense-cot ospfd[99839]: nsm_change_state(1.1.1.11, Exchange -> Full): scheduling new router-LSA origination
Nov 17 12:39:43 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:43 pfsense-cot ospfd[99839]: SPF: Scheduled in 33 msec
Nov 17 12:39:44 pfsense-cot ospfd[99839]: SPF Processing Time(usecs): External Routes: 8
Nov 17 12:39:47 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:47 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.12 on ovpnc7:172.18.3.102: Down -> Init (PacketReceived)
Nov 17 12:39:47 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.12 on ovpnc7:172.18.3.102: Init -> ExStart (2-WayReceived)
Nov 17 12:39:47 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.12: Initial DBD from Slave, ignoring.
Nov 17 12:39:47 pfsense-cot ospfd[99839]: Packet[DD]: Neighbor 1.1.1.12 Negotiation done (Master).
Nov 17 12:39:47 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.12 on ovpnc7:172.18.3.102: ExStart -> Exchange (NegotiationDone)
Nov 17 12:39:47 pfsense-cot ospfd[99839]: AdjChg: Nbr 1.1.1.12 on ovpnc7:172.18.3.102: Exchange -> Full (ExchangeDone)
Nov 17 12:39:47 pfsense-cot ospfd[99839]: nsm_change_state(1.1.1.12, Exchange -> Full): scheduling new router-LSA origination
Nov 17 12:39:47 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:48 pfsense-cot ospfd[99839]: SPF: Scheduled in 0 msec
Nov 17 12:39:48 pfsense-cot ospfd[99839]: SPF Processing Time(usecs): External Routes: 6
Nov 17 12:40:20 pfsense-cot ospfd[99839]: DR-Election[1st]: Backup 192.168.3.10
Nov 17 12:40:20 pfsense-cot ospfd[99839]: DR-Election[1st]: DR     192.168.3.10
Nov 17 12:40:20 pfsense-cot ospfd[99839]: DR-Election[2nd]: Backup 0.0.0.0
Nov 17 12:40:20 pfsense-cot ospfd[99839]: DR-Election[2nd]: DR     192.168.3.10

Diagnostics - Routes
IPv4 Routes
Destination	Gateway	Flags	Use	Mtu	Netif	Expire
192.168.0.0/24	172.18.3.1	UG1	33836	1500	ovpnc2	
192.168.1.0/24	172.18.3.1	UG1	6580	1500	ovpnc2	
192.168.2.0/24	172.18.3.1	UG1	12908	1500	ovpnc2	
192.168.3.0/24	link#5	U	2115277	1500	hn0

      pfSense 2.3.2-RELEASE-p1
      Quagga_OSPF 0.6.15

      Appreciate any help

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        https://forum.pfsense.org/index.php?topic=111108.0

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • Z
          zxsavage
          last edited by

          @Derelict:

          https://forum.pfsense.org/index.php?topic=111108.0

          Oh crap. Sorry, need more sleep :)
          Should you add this to the topic you linked? Or just remove topic.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.