OSPF between two pfSense routers?



  • For lab purpose, I have difficult to setup OSPF between two pfSense routers. I am new to OSPF anyways.
    alt text
    I cannot ping from client-2 (10.2.5.20) to client-1 (192.168.50.10).

    Here are some examples of OSPF status from ro2 (router 2)

    OSPF Neighbors
    Neighbor ID     Pri State           Dead Time Address         Interface            RXmtL RqstL DBsmL
    192.168.50.250    1 Full/Backup       35.050s 172.16.10.1     em0:172.16.10.2          0     0     0
    
    OSPF Routes
    ============ OSPF network routing table ============
    N    10.2.50.0/24          [100] area: 0.0.0.0
                               directly attached to em1
    N    172.16.10.0/30        [100] area: 0.0.0.0
                               directly attached to em0
    N    192.168.50.0/24       [200] area: 0.0.0.0
                               via 172.16.10.1, em0
    N    192.168.122.0/24      [200] area: 0.0.0.0
                               via 172.16.10.1, em0
    
    ============ OSPF router routing table =============
    R    192.168.50.250        [100] area: 0.0.0.0, ASBR
                               via 172.16.10.1, em0
    
    ============ OSPF external routing table ===========
    
    em0 is up
      ifindex 1, MTU 1500 bytes, BW 1000 Mbit 
      Internet Address 172.16.10.2/30, Broadcast 172.16.10.3, Area 0.0.0.0
      MTU mismatch detection: enabled
      Router ID 10.2.50.251, Network Type BROADCAST, Cost: 100
      Transmit Delay is 1 sec, State DR, Priority 1
      Backup Designated Router (ID) 192.168.50.250, Interface Address 172.16.10.1
      Saved Network-LSA sequence number 0x80000002
      Multicast group memberships: OSPFAllRouters OSPFDesignatedRouters
      Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
        Hello due in 2.521s
      Neighbor Count is 1, Adjacent neighbor count is 1
    em1 is up
      ifindex 2, MTU 1500 bytes, BW 1000 Mbit 
      Internet Address 10.2.50.251/24, Broadcast 10.2.50.255, Area 0.0.0.0
      MTU mismatch detection: enabled
      Router ID 10.2.50.251, Network Type BROADCAST, Cost: 100
      Transmit Delay is 1 sec, State DR, Priority 1
      No backup designated router on this network
      Multicast group memberships: 
      Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
        No Hellos (Passive interface)
      Neighbor Count is 0, Adjacent neighbor count is 0
    

    My end goal is I like client-2 can access to 192.168.50.0/24 subnet and access to the internet from ro1 (router 1) and vise versa. Thanks.



  • What do the firewall rules look like on your 172.16.10.0/30 interfaces on both sides?



  • @chpalmer
    Hello, thanks for reply. Here is the firewall rules on ro1 and ro2 at 172.16.10.0/30 interface. They are same.
    alt text



  • You'll have to allow more than OSPF and ping to allow traffic to flow over the 172.16.10.0/30 connection. Allow IPv4 traffic.

    How is your gateway defined on ro2?


Log in to reply