Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OSPFv3 between ICX switch stuck in INIT after power event

    Scheduled Pinned Locked Moved FRR
    1 Posts 1 Posters 358 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      freph533
      last edited by freph533

      Hey folks,

      Having a really weird issue that I can't seem to figure out between a previously working pfSense box and an IC7250. No config changes were made, but devices were power cycled yesterday due to a power outage in the area. Config was saved on the ICX prior to this so no changes have been made.

      pfSense info:
      2.5.2-RELEASE
      frr 1.1.0_15

      FRR settings:
      OSPF6 routing enabled
      Router ID 10.0.0.1
      Disable FIB updates None (default)
      Default area 0.0.0.0
      Default area type Normal (default)
      No route filtering configured, advanced options empty
      Area 0.0.0.0 set to normal (default) with no extra settings
      LAN interface configured as member of area 0.0.0.0, network type Broadcast, Passive unchecked, Hello 1 Dead 4

      frr.conf:
      ip router-id 10.0.0.1
      !
      interface ix0
      ip ospf dead-interval 4
      ip ospf hello-interval 1
      ip ospf area 0.0.0.0
      ipv6 ospf6 network broadcast
      ipv6 ospf6 dead-interval 4
      ipv6 ospf6 hello-interval 1
      !
      router ospf
      ospf router-id 10.0.0.1
      log-adjacency-changes detail
      default-information originate
      area 0.0.0.0 shortcut default
      !
      router ospf6
      ospf6 router-id 10.0.0.1
      log-adjacency-changes detail
      area 0.0.0.0 range 2605:a601:a63c:ebff::/64 cost 1
      interface ix0 area 0.0.0.0

      ICX info:
      ICX7250-24
      SW: Version 08.0.90d

      ip router-id 10.0.0.2
      ipv6 unicast-routing
      ipv6 route ::/0 2605:a601:a63c:ebff::1 (pfSense link)

      router ospf
      area 0
      default-passive-interface
      redistribute static

      ipv6 router ospf
      area 0
      default-passive-interface
      redistribute static

      interface ve 400 (pfSense link)
      ip address 10.0.0.2 255.255.255.252
      ip ospf area 0
      ip ospf dead-interval 4
      ip ospf hello-interval 1
      ip ospf active
      ipv6 address 2605:a601:a63c:ebff::2/64
      ipv6 ospf area 0
      ipv6 ospf dead-interval 4
      ipv6 ospf hello-interval 1
      ipv6 ospf active

      Standard OSPF seems to still be working just fine but OSPFv3 is stuck in an INIT state on the ICX side, and FRR on pfSense doesn't even seem to recognize the neighbor. Packet capture on pfSense shows the right info for the Hello messages but after reinstalling FRR, restarting the FRR process, and removing/re-configuring multiple things manually I'm at a bit of a loss.

      Edit:
      Nevermind, solved. For some reason pfSense was blocking the link local address that was being used for OSPFv3 Hello messages and I definitely missed it. Added the link local address to my usual allowed LAN rules and all is well. Hopefully this note helps someone out in the future.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.