OSPF router 2 WAy State

[Ashok K Gurung]

Hi

we had working OSPF configured between Juniper firewall, Cisco router and procurve 5308xl. We recently changed our firewall to WatchGuard 520XTM.

Now OSPF between Procurve and WatchGuard is not working and we get following status.

HP ProCurve Switch 5308xl# show ip ospf neighbor

 OSPF Neighbor Information

  Router ID       Pri IP Address      NbIfState State    Rxmt QLen Events
  --------------- --- --------------- --------- -------- --------- ----------
  192.168.1.1     1   192.168.1.1               2WAY     0         3
  0.0.0.6         1   192.168.1.253   BDR       FULL     0         7
  192.168.4.1     1   192.168.1.254   DR        FULL     1         7

Status on Cisco Router shows

Neighbor ID     Pri   State           Dead Time   Address         Interface
192.168.11.254    1   FULL/DR         00:00:39    192.168.4.4     FastEthernet0/1
192.168.11.254    1   FULL/DR         00:00:39    192.168.3.4     FastEthernet0/0/0
0.0.0.3           1   FULL/DROTHER    00:00:32    192.168.1.3     FastEthernet0/0
0.0.0.6           1   FULL/BDR        00:00:32    192.168.1.253   FastEthernet0/0
192.168.1.1       1   FULL/DROTHER    00:00:33    192.168.1.1     FastEthernet0/0

by the looks of it WatchGuard and Cisco routers are working all good but not between Procurve and Watchguard and currently stuck in 2WAY State no matter what we do.

we were wondering if some one would be able to help us out. we didn't seems to be able to resolved OSPF state no matter what we do.

Thank you in advance.

[kara323]

Hello Ashok,

Thanks for the description of your issue.

In a multiaccess segment, OSPF routers form full adjacency only with the DR/BDR and two-way adjacency with the other routers.

Thus a full adjacency is only established with the DR and the BDR (which seems to be your Cisco routers in your Multiaccess segment 192.168.1.254 and .253).

===================================================================================

From the HP routing guide =>

2WAY – Communication between the two routers is bidirectional. This is the most advanced state before beginning adjacency establishment. The Designated Router and Backup Designated Router are selected from the set of neighbors in the 2Way state or greater.

===================================================================================

Each non-DR/non-BDR router will be in a Full state with the DR and BDR but will be in the TwoWay state with other non-DR routers.  That simply means that the router has two-way communication with that neighbor but has not established a full adjacency with it, since the router will only establish adjacencies with the DR and BDR.

Meaning all the OSPF database exchange is performed only with the DR and BDR (Cisco routers) and not directly between non-DR/BDR devices.

DR/BDR election process takes under certain rules : already existing DR, BDR - ip ospf router priority, highest IP ....

So if your HP routing table is filled with OSPF routes I would not worry about it as it is the normal behaviour and keep the situation this way.

Feel free to reply (by posting your network diagram) if you need to continue further on this concern.

Kind regards!

Karim