OSPFv3 between ICX switch stuck in INIT after power event
-
Hey folks,
Having a really weird issue that I can't seem to figure out between a previously working pfSense box and an IC7250. No config changes were made, but devices were power cycled yesterday due to a power outage in the area. Config was saved on the ICX prior to this so no changes have been made.
pfSense info:
2.5.2-RELEASE
frr 1.1.0_15FRR settings:
OSPF6 routing enabled
Router ID 10.0.0.1
Disable FIB updates None (default)
Default area 0.0.0.0
Default area type Normal (default)
No route filtering configured, advanced options empty
Area 0.0.0.0 set to normal (default) with no extra settings
LAN interface configured as member of area 0.0.0.0, network type Broadcast, Passive unchecked, Hello 1 Dead 4frr.conf:
ip router-id 10.0.0.1
!
interface ix0
ip ospf dead-interval 4
ip ospf hello-interval 1
ip ospf area 0.0.0.0
ipv6 ospf6 network broadcast
ipv6 ospf6 dead-interval 4
ipv6 ospf6 hello-interval 1
!
router ospf
ospf router-id 10.0.0.1
log-adjacency-changes detail
default-information originate
area 0.0.0.0 shortcut default
!
router ospf6
ospf6 router-id 10.0.0.1
log-adjacency-changes detail
area 0.0.0.0 range 2605:a601:a63c:ebff::/64 cost 1
interface ix0 area 0.0.0.0ICX info:
ICX7250-24
SW: Version 08.0.90dip router-id 10.0.0.2
ipv6 unicast-routing
ipv6 route ::/0 2605:a601:a63c:ebff::1 (pfSense link)router ospf
area 0
default-passive-interface
redistribute staticipv6 router ospf
area 0
default-passive-interface
redistribute staticinterface ve 400 (pfSense link)
ip address 10.0.0.2 255.255.255.252
ip ospf area 0
ip ospf dead-interval 4
ip ospf hello-interval 1
ip ospf active
ipv6 address 2605:a601:a63c:ebff::2/64
ipv6 ospf area 0
ipv6 ospf dead-interval 4
ipv6 ospf hello-interval 1
ipv6 ospf activeStandard OSPF seems to still be working just fine but OSPFv3 is stuck in an INIT state on the ICX side, and FRR on pfSense doesn't even seem to recognize the neighbor. Packet capture on pfSense shows the right info for the Hello messages but after reinstalling FRR, restarting the FRR process, and removing/re-configuring multiple things manually I'm at a bit of a loss.
Edit:
Nevermind, solved. For some reason pfSense was blocking the link local address that was being used for OSPFv3 Hello messages and I definitely missed it. Added the link local address to my usual allowed LAN rules and all is well. Hopefully this note helps someone out in the future.