OSPF neighbor not from other neighbor reachable

[andreaspechiny]

Hello,

i've got following problem with a conniction by ospf:

following devices are involved:

msw03 (hp 5400zl) -                     msw02 (hp5400zl)                   - Firewall (sonicwall nsa2400)

192.168.99.3/24     - 192.168.99.2/24 + 192.168.253.1/30 - 192.168.253.2/30

working:

ping from msw03 to msw02

ping from msw02 to FW

notworking:

ping from msw03 to FW

Here is my config:

msw03:

ip router-id 192.168.255.3
ip routing
interface loopback 0
   ip address 192.168.255.3
   ip ospf 192.168.255.3 area backbone
router ospf
   area backbone
   redistribute connected
   redistribute static
   enable
   exit
router vrrp
   virtual-ip-ping
   ipv4 enable
vlan 99
   name "mgmt"
   untagged E24
   tagged B23,Trk1
   ip address 192.168.99.3 255.255.255.0
   ip ospf 192.168.99.3 area backbone
   vrrp vrid 99
      virtual-ip-address 192.168.99.1
      priority 120
      enable
      exit
   exit
vlan 253
   name "VLAN253"
   tagged Trk1
   ip address 192.168.253.5 255.255.255.252
   ip ospf 192.168.253.5 area backbone
   exit

msw02:

ip router-id 192.168.255.2
ip routing
interface loopback 0
   ip address 192.168.255.2
   ip ospf 192.168.255.2 area backbone
   exit
snmp-server community "public" unrestricted
router ospf
   area backbone
   redistribute connected
   redistribute static
   no rfc1583-compatibility
   enable
   exit
router vrrp
   virtual-ip-ping
   ipv4 enable
   exit
vlan 99
   name "mgmt"
   untagged E24
   tagged B23,Trk1
   ip address 192.168.99.2 255.255.255.0
   ip helper-address 192.168.2.199
   ip helper-address 192.168.2.215
   ip ospf 192.168.99.2 area backbone
   vrrp vrid 99
      virtual-ip-address 192.168.99.1
      priority 200
      enable
      exit
vlan 254
   name "management"
   tagged Trk1
   ip address 192.168.254.2 255.255.255.0
   vrrp vrid 254
      virtual-ip-address 192.168.254.1
      priority 200
      enable
      exit
   exit
vlan 255
   name "VLAN255"
   tagged Trk1
   no ip address
   exit



Output sh ip route 192.168.253.2

msw03(config)# sh ip route 192.168.253.2

                                                                   IP Route Entries to 192.168.253.2

  Destination        Gateway         VLAN Type      Sub-Type   Metric     Dist.
  ------------------ --------------- ---- --------- ---------- ---------- -----
  192.168.253.0/30   192.168.99.2    99   ospf      IntraArea  2          110

msw02(config)# sh ip route 192.168.253.2

                                                                   IP Route Entries to 192.168.253.2

  Destination        Gateway         VLAN Type      Sub-Type   Metric     Dist.
  ------------------ --------------- ---- --------- ---------- ---------- -----
  192.168.253.0/30   VLAN253         253  connected            1          0

OSPF neighbors

msw03(config)# sh ip ospf nei

 OSPF Neighbor Information

                                                         Rxmt         Helper
  Router ID       Pri IP Address      NbIfState State    QLen  Events Status
  --------------- --- --------------- --------- -------- ----- ------ ------
  192.168.255.2   1   192.168.99.2    BDR       FULL     0     6      None

msw02(config)# sh ip ospf neigh

 OSPF Neighbor Information

                                                         Rxmt         Helper
  Router ID       Pri IP Address      NbIfState State    QLen  Events Status
  --------------- --- --------------- --------- -------- ----- ------ ------
  192.168.255.3   1   192.168.99.3    DR        FULL     0     7      None
  192.168.253.6   1   192.168.253.2   BDR       EXSTART  0     4      None

I can't identify the problem. I hoe some can help me. Thanks

Andreas

[Nicholas_Fagan]

The FW is the gateway right. Let's see a tracert from msw03 out to the web.

Regards,