Quagga OSPF to Cisco

Dmkaz · Aug 19, 2013, 9:27 PM

Problem I'm having is getting routes redistributed correctly between my pfsense box (2.0.3-RELEASE) and a Cisco 1811 Router. I previously had this working between the Cisco and a Juniper SRX so I can verify the 1811 config is good.

I get OSPF setup correctly and get a full adjacency. When doing a 'sh ip route' on the 1811, I show no routes from the pfsense box. Alternatively, on the pfsense box it's 'showing' the routes in the status tab but none are added to the routing table.

Setup:

Simple area of 0.0.0.0. RID is 6.6.6.6 on the 1811 and 5.5.5.5 on the pfsense.

I have the 'Redistribute connected subnets' checked in Quagga.


       OSPF Router with ID (5.5.5.5)

                Router Link States (Area 0.0.0.0)

Link ID         ADV Router      Age  Seq#       CkSum  Link count
5.5.5.5         5.5.5.5            3 0x80000004 0xa780 1
6.6.6.6         6.6.6.6         1115 0x80002be0 0x7f1e 5

                AS External Link States

Link ID         ADV Router      Age  Seq#       CkSum  Route
0.0.0.0         5.5.5.5            3 0x80000003 0xac06 E2 0.0.0.0/0 [0x0]
xx.xx.xx.xx  5.5.5.5            3 0x80000003 0x925c E2 xx.xx.xx.xx/29 [0x0]
172.16.0.0      6.6.6.6         1625 0x80000116 0x83b1 E2 172.16.0.0/25 [0x0]
172.16.0.128    6.6.6.6         1625 0x80000116 0xff74 E2 172.16.0.128/26 [0x0]
172.16.10.0     6.6.6.6         1625 0x80000116 0xb703 E2 172.16.10.0/28 [0x0]
172.16.11.9     6.6.6.6         1007 0x80000001 0xd9dd E2 172.16.11.9/32 [0x0]
172.16.11.10    6.6.6.6          658 0x80000001 0xcfe6 E2 172.16.11.10/32 [0x0]
172.16.12.2     6.6.6.6         1625 0x80000116 0xe1c6 E2 172.16.12.2/31 [0x0]
172.16.50.0     5.5.5.5            3 0x80000003 0x6356 E2 172.16.50.0/24 [0x0]
172.16.70.0     5.5.5.5            3 0x80000002 0x881e E2 172.16.70.0/24 [0x0]
172.16.80.0     5.5.5.5            3 0x80000003 0x1883 E2 172.16.80.0/24 [0x0]
172.16.100.0    6.6.6.6          360 0x80000029 0x0d32 E2 172.16.100.0/24 [0x0]
172.16.137.0    6.6.6.6         1625 0x80000116 0x9794 E2 172.16.137.0/24 [0x0]
172.16.150.0    6.6.6.6         1625 0x80000116 0x0817 E2 172.16.150.0/24 [0x0]
172.16.151.0    6.6.6.6         1625 0x80000116 0xfc21 E2 172.16.151.0/24 [0x0]
172.16.152.0    6.6.6.6         1625 0x80000116 0xf12b E2 172.16.152.0/24 [0x0]
172.16.153.0    6.6.6.6         1625 0x80000116 0xe635 E2 172.16.153.0/24 [0x0]
192.168.7.0     6.6.6.6         1625 0x80000116 0x07fa E2 192.168.7.0/24 [0x0]
192.168.10.0    6.6.6.6         1625 0x80000116 0xe519 E2 192.168.10.0/24 [0x0]
192.168.50.0    5.5.5.5            3 0x80000002 0x9082 E2 192.168.50.0/24 [0x0]
192.168.50.1    5.5.5.5            3 0x80000002 0x868b E2 192.168.50.1/32 [0x0]
192.168.110.0   6.6.6.6          623 0x80000003 0xbeef E2 192.168.110.0/24 [0x0]
xx.xx.xx.xx  5.5.5.5            3 0x80000002 0x7fc3 E2 xx.xx.xx.xx/32 [0x0]
xx.xx.xx.xx  5.5.5.5            3 0x80000003 0x0531 E2 xx.xx.xx.xx/32 [0x0]

Any help or direction is appreciated. Cheers!

jimp · Aug 19, 2013, 11:27 PM

"Redistribute Kernel" is probably closer to what you actually want.

Orherwise, Make sure your interface(s) with routes you want to send are added as passive interfaces.

Dmkaz · Aug 20, 2013, 1:31 AM

jimp,

Appreciate the advice. I went ahead and checked the redistrib. kernel and added the subnets as passive interfaces. I am now seeing them in the Quagga Routing Table:


============ OSPF network routing table ============
N    172.16.50.0/24        [10] area: 0.0.0.0
                           directly attached to lagg0_vlan30
N    172.16.60.0/24        [10] area: 0.0.0.0
                           directly attached to lagg0_vlan60
N    172.16.70.0/24        [10] area: 0.0.0.0
                           directly attached to lagg0_vlan80
N    172.16.80.0/24        [10] area: 0.0.0.0
                           directly attached to lagg0_vlan90

However, On the Cisco side, I am still seeing no routes being added.

Doing a 'sh ip route' doesn't show any OSPF added routes. However, OSPF does have full adjacency:


Neighbor ID     Pri   State           Dead Time   Address         Interface
5.5.5.5           0   FULL/  -        00:00:33    172.16.60.1     FastEthernet1

OSPF Config on the Cisco Here:


router ospf 2222
 router-id 6.6.6.6
 log-adjacency-changes
 redistribute eigrp 200 subnets
 network 0.0.0.0 255.255.255.255 area 0

jimp · Aug 20, 2013, 7:00 PM

What does the OSPF and Zebra config look like in /usr/local/etc/quagga/ ?

What does the OSPF status show?

Any system logs that refer to OSPF?

Dmkaz · Aug 20, 2013, 11:28 PM

So there are no files in /usr/local/etc/quagga

There is an ospfd.conf file in /usr/local/etc/


router-id 5.5.5.5
redistribute 172.16.50.0
redistribute connected
area 0.0.0.0 {
        interface lagg0_vlan60

Quagga OSPF General

OSPF Routing Process, Router ID: 5.5.5.5
 Supports only single TOS (TOS0) routes
 This implementation conforms to RFC2328
 RFC1583Compatibility flag is disabled
 OpaqueCapability flag is disabled
 Initial SPF scheduling delay 200 millisec(s)
 Minimum hold time between consecutive SPFs 1000 millisec(s)
 Maximum hold time between consecutive SPFs 10000 millisec(s)
 Hold time multiplier is currently 1
 SPF algorithm last executed 3.470s ago
 SPF timer is inactive
 Refresh timer 10 secs
 This router is an ASBR (injecting external routing information)
 Number of external LSA 17\. Checksum Sum 0x00080fe4
 Number of opaque AS LSA 0\. Checksum Sum 0x00000000
 Number of areas attached to this router: 1
 All adjacency changes are logged

 Area ID: 0.0.0.0 (Backbone)
   Number of interfaces in this area: Total: 2, Active: 2
   Number of fully adjacent neighbors in this area: 1
   Area has no authentication
   SPF algorithm executed 3 times
   Number of LSA 2
   Number of router LSA 2\. Checksum Sum 0x0001244c
   Number of network LSA 0\. Checksum Sum 0x00000000
   Number of summary LSA 0\. Checksum Sum 0x00000000
   Number of ASBR summary LSA 0\. Checksum Sum 0x00000000
   Number of NSSA LSA 0\. Checksum Sum 0x00000000
   Number of opaque link LSA 0\. Checksum Sum 0x00000000
   Number of opaque area LSA 0\. Checksum Sum 0x00000000

Quagga OSPF Neighbor Info


 Neighbor ID Pri State           Dead Time Address         Interface            RXmtL RqstL DBsmL
6.6.6.6           1 Full/DR           39.924s 172.16.60.2     lagg0_vlan60:172.16.60.1     0     0     0

Ton of these in the Sys Log:

ospfd[6765]: Vty connection from 127.0.0.1
ospfd[6765]: LSA[Type5:0.0.0.0]: Not originate AS-external-LSA for default
ospfd[6765]: nsm_change_state(6.6.6.6, Loading -> Full): scheduling new router-LSA origination

Thanks Again

arthurbrownleeiv · Aug 29, 2013, 4:03 AM

I've got some similar issues, however I'm having to deal with XO on an MPLS for exchanging routes.

On one unit, I can get the OSPF routes added to the kernel routing table, but the other two units will never add the routes to the kernel routing table, even though they're setup the same.

Not to dirty up this thread, but I'm subscribing since this seems to be close to my issues as well.

Gloom · Sep 3, 2013, 8:27 AM

Try binding to the phyical interface rather than lagg0

Dmkaz · Oct 23, 2013, 6:11 PM

Just an update here:

I went ahead and moved to new gear and separated out each vlan on it's own interface.

Upon firing up OSPF again, the same issue prevails. I get the routes from the Cisco 1811 and shows as "FULL". Doing same 'sh ip route' in the Cisco side and it doesn't see any redistributed routes from the pfsense side.

Any ideas?