OSPF between two pfSense routers?

norah315

For lab purpose, I have difficult to setup OSPF between two pfSense routers. I am new to OSPF anyways.
alt text
I cannot ping from client-2 (10.2.5.20) to client-1 (192.168.50.10).

Here are some examples of OSPF status from ro2 (router 2)

OSPF Neighbors
Neighbor ID     Pri State           Dead Time Address         Interface            RXmtL RqstL DBsmL
192.168.50.250    1 Full/Backup       35.050s 172.16.10.1     em0:172.16.10.2          0     0     0

OSPF Routes
============ OSPF network routing table ============
N    10.2.50.0/24          [100] area: 0.0.0.0
                           directly attached to em1
N    172.16.10.0/30        [100] area: 0.0.0.0
                           directly attached to em0
N    192.168.50.0/24       [200] area: 0.0.0.0
                           via 172.16.10.1, em0
N    192.168.122.0/24      [200] area: 0.0.0.0
                           via 172.16.10.1, em0

============ OSPF router routing table =============
R    192.168.50.250        [100] area: 0.0.0.0, ASBR
                           via 172.16.10.1, em0

============ OSPF external routing table ===========

em0 is up
  ifindex 1, MTU 1500 bytes, BW 1000 Mbit 
  Internet Address 172.16.10.2/30, Broadcast 172.16.10.3, Area 0.0.0.0
  MTU mismatch detection: enabled
  Router ID 10.2.50.251, Network Type BROADCAST, Cost: 100
  Transmit Delay is 1 sec, State DR, Priority 1
  Backup Designated Router (ID) 192.168.50.250, Interface Address 172.16.10.1
  Saved Network-LSA sequence number 0x80000002
  Multicast group memberships: OSPFAllRouters OSPFDesignatedRouters
  Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
    Hello due in 2.521s
  Neighbor Count is 1, Adjacent neighbor count is 1
em1 is up
  ifindex 2, MTU 1500 bytes, BW 1000 Mbit 
  Internet Address 10.2.50.251/24, Broadcast 10.2.50.255, Area 0.0.0.0
  MTU mismatch detection: enabled
  Router ID 10.2.50.251, Network Type BROADCAST, Cost: 100
  Transmit Delay is 1 sec, State DR, Priority 1
  No backup designated router on this network
  Multicast group memberships: 
  Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
    No Hellos (Passive interface)
  Neighbor Count is 0, Adjacent neighbor count is 0

My end goal is I like client-2 can access to 192.168.50.0/24 subnet and access to the internet from ro1 (router 1) and vise versa. Thanks.

chpalmer

What do the firewall rules look like on your 172.16.10.0/30 interfaces on both sides?

norah315

@chpalmer
Hello, thanks for reply. Here is the firewall rules on ro1 and ro2 at 172.16.10.0/30 interface. They are same.
alt text

Thale

You'll have to allow more than OSPF and ping to allow traffic to flow over the 172.16.10.0/30 connection. Allow IPv4 traffic.

How is your gateway defined on ro2?