OSPF, Procurve 5406

[Jayd]

Hi there,

I have a really tricky issue with OSPF. We have two 5406 switches that are doing L3 routing. On the first one we have the main WAN link, one the second one the backup WAN link. The two switches are connected using a trunk.

From the 1st switch I can see both the main & backup routers in the OSPF tables in the "FULL" state.

From the 2nd switch I can see the backup router with accurate info and the main router in the "INIT" state. Looking at the log I see :

EVENT Hello Recv
EVENT 1 Way

with working OSPF neighbor, it should be a 2 Way message.

Our ISP is speaking of multicast issues.

Any advice?

[Patrick Terlisten]

Hello,

can you post a "show running-config" of both switches?

Thanks.

Best regards,
Patrick

[Jayd]

MAIN_SWITCH is connected to BACKUP_SWITCH using trk1 (A24,B24 both sides). The main router is connected on MAIN_SWITCH/A1, backup router is connected on BACKUP_SWITCH/B1.

Here are the configs :

hostname "MAIN_SWITCH"
module 1 type J8705A
module 2 type J8705A
trunk A24,B24 Trk1 Trunk
ip routing
vlan 1
name "data"
untagged A3-A18,A21-A23,B1-B17,B21-B23,Trk1
ip address 168.246.212.1 255.255.252.0
no untagged A1-A2,A19-A20,B18-B19,Trk10
exit
vlan 200
name "Interconnect"
untagged A1
ip address 172.30.76.13 255.255.255.248
tagged Trk1
exit
ip router-id 172.30.76.13
router ospf
area 115.121.3.10
redistribute connected
exit
router vrrp
vlan 1
ip ospf 168.246.212.1 area 115.121.3.10
vrrp vrid 1
owner
virtual-ip-address 168.246.212.1 255.255.252.0
priority 255
enable
exit
exit
vlan 200
ip ospf 172.30.76.13 area 115.121.3.10
monitor all Both mirror 1
vrrp vrid 1
owner
virtual-ip-address 172.30.76.13 255.255.255.248
priority 255
enable
exit
exit






hostname "BACKUP_SWITCH"
module 1 type J8705A
module 2 type J8705A
trunk A24,B24 Trk1 Trunk
ip routing
vlan 1
name "data"
untagged A2-A23,B3-B19,B21-B23,Trk1
ip address 168.246.212.35 255.255.252.0
no untagged A1,B1-B2,B20
exit
vlan 200
name "Interconnect"
untagged B1-B2
ip address 172.30.76.14 255.255.255.248
tagged Trk1
exit
ip router-id 172.30.76.14
router ospf
area 115.121.3.10
redistribute connected
exit
router vrrp
vlan 1
ip ospf 168.246.212.35 area 115.121.3.10
vrrp vrid 1
backup
virtual-ip-address 168.246.212.34 255.255.252.0
enable
exit
exit
vlan 200
ip ospf 172.30.76.14 area 115.121.3.10
vrrp vrid 1
backup
virtual-ip-address 172.30.76.13 255.255.255.248
enable
exit
exit

[Mohammed Faiz]

Could you post the output of the "show ip ospf neigh" and "show ip ospf inter" commands on both switches?
Just makes it a bit easier to visualise :)

[Jayd]

MAIN_SWITCH# sh ip ospf neighbor

OSPF Neighbor Information

Router ID Pri IP Address NbIfState State Rxmt QLen Events
--------------- --- --------------- --------- -------- --------- ----------
172.30.76.14 1 10.8.193.253 BDR FULL 0 7
172.30.76.14 1 168.246.208.253 BDR FULL 0 7
172.30.76.14 1 168.246.209.253 BDR FULL 0 6
172.30.76.14 1 168.246.212.35 BDR FULL 0 6
172.30.76.10 1 172.30.76.10 DR FULL 0 6
172.30.76.1 1 172.30.76.11 FULL 0 6
172.30.76.12 0 172.30.76.12 FULL 0 6
172.30.76.14 1 172.30.76.14 FULL 0 6

MAIN_SWITCH# sh ip ospf link-state

OSPF Link State Database for Area 115.121.3.10

Advertising
LSA Type Link State ID Router ID Age Sequence # Checksum
---------- --------------- --------------- ---- ----------- ----------
Router 172.30.76.1 172.30.76.1 200 0x8000003e 0x00001440
Router 172.30.76.10 172.30.76.10 1260 0x8000003a 0x00005121
Router 172.30.76.12 172.30.76.12 1793 0x8000003d 0x0000fe61
Router 172.30.76.13 172.30.76.13 1162 0x80000053 0x000005bb
Router 172.30.76.14 172.30.76.14 1297 0x80000052 0x0000f4a7
Network 10.8.193.254 172.30.76.13 1162 0x8000002d 0x000003cb
Network 168.246.208.254 172.30.76.13 1162 0x8000002d 0x00002110
Network 168.246.209.254 172.30.76.13 1162 0x8000002d 0x0000161a
Network 168.246.212.1 172.30.76.13 1162 0x8000002d 0x0000d15c
Network 172.30.76.10 172.30.76.10 1260 0x8000002a 0x00001c74
Network 172.30.76.13 3600 0x80000000 0x00000000
Summary 172.30.76.2 172.30.76.10 764 0x80000036 0x00004a82


BACKUP_SWITCH# sh ip ospf neighbor

OSPF Neighbor Information

Router ID Pri IP Address NbIfState State Rxmt QLen Events
--------------- --- --------------- --------- -------- --------- ----------
172.30.76.13 1 10.8.193.254 DR FULL 0 6
172.30.76.13 1 168.246.208.254 DR FULL 0 6
172.30.76.13 1 168.246.209.254 DR FULL 0 6
172.30.76.13 1 168.246.212.1 DR FULL 0 6
172.30.76.10 1 172.30.76.10 INIT 0 2
172.30.76.1 1 172.30.76.11 2WAY 0 3
172.30.76.12 0 172.30.76.12 2WAY 0 3
172.30.76.13 1 172.30.76.13 DR FULL 0 7

BACKUP_SWITCH# sh ip ospf link-state

OSPF Link State Database for Area 115.121.3.10

Advertising
LSA Type Link State ID Router ID Age Sequence # Checksum
---------- --------------- --------------- ---- ----------- ----------
Router 172.30.76.1 172.30.76.1 265 0x8000003e 0x00001440
Router 172.30.76.10 172.30.76.10 1325 0x8000003a 0x00005121
Router 172.30.76.12 172.30.76.12 1858 0x8000003d 0x0000fe61
Router 172.30.76.13 172.30.76.13 1227 0x80000053 0x000005bb
Router 172.30.76.14 172.30.76.14 1360 0x80000052 0x0000f4a7
Network 10.8.193.254 172.30.76.13 1227 0x8000002d 0x000003cb
Network 168.246.208.254 172.30.76.13 1227 0x8000002d 0x00002110
Network 168.246.209.254 172.30.76.13 1227 0x8000002d 0x0000161a
Network 168.246.212.1 172.30.76.13 1227 0x8000002d 0x0000d15c
Network 172.30.76.10 172.30.76.10 1325 0x8000002a 0x00001c74
Network 172.30.76.13 3600 0x80000000 0x00000000
Summary 172.30.76.2 172.30.76.10 829 0x80000036 0x00004a82

Where :

172.30.76.10 is the main router
172.30.76.11 is the backup router
172.30.76.13 is the main switch
172.30.76.14 is the backup switch

[Jayd]

Sorry I've missed the "sh ip ospf interface" ;o)

MAIN_SWITCH# sh ip ospf interface

OSPF Interface Status

IP Address Status Area ID State Auth-type Cost Pri Passive
--------------- -------- --------------- ------- --------- ----- --- -------
10.8.193.254 enabled 115.121.3.10 DR none 1 1 no
168.246.208.254 enabled 115.121.3.10 DR none 1 1 no
168.246.209.254 enabled 115.121.3.10 DR none 1 1 no
168.246.212.1 enabled 115.121.3.10 DR none 1 1 no
172.30.76.13 enabled 115.121.3.10 BDR none 1 1 no

BACKUP_SWITCH# sh ip ospf interface

OSPF Interface Status

IP Address Status Area ID State Auth-type Cost Pri Passive
--------------- -------- --------------- ------- --------- ----- --- -------
10.8.193.253 enabled 115.121.3.10 BDR none 1 1 no
168.246.208.253 enabled 115.121.3.10 BDR none 1 1 no
168.246.209.253 enabled 115.121.3.10 BDR none 1 1 no
168.246.212.35 enabled 115.121.3.10 BDR none 1 1 no
172.30.76.14 enabled 115.121.3.10 DROTHER none 1 1 no

[Mohammed Faiz]

> 172.30.76.11 is the backup router

I can't see this mentioned anywhere?

[Jayd]

It appears with the routerID 172.30.76.1 (its loopback) but you can also see it's IP in the "IP Address" column of the "sh ip ospf neighbor" command

[Mohammed Faiz]

Ah yes, missed that :)
Have you tried the debug options to see if you can look at the hello packets being sent out from the backup switch?

"debug destination ..."
"debug ip ospf packet hello"

Other than that you might have to mirror A1 the main switch to show your ISP that the correct hello messages are reaching their router.

[Jayd]

You pointed me in the right direction : a mirror was configured in the #200 VLAN. Removing it solved the issue... strange @!