OSPF over IPSEC & route learning

Hello all, its me again.

Having set up my IPSEC tunnel properly with VTI interfaces, I want to use OSPF to share internal routes between my two routers.

However, I cannot figure out why I can’t get routes to be, well, shared.

Simplified diagram of the network :

image

Here’s my OSPF config :
R1 (10.0.0.3/31)

 area 0 {
     network 10.100.0.0/16
     network 10.0.0.2/31
 }
 default-information {
     originate {
         always
         metric 10
         metric-type 2
     }
 }
 log-adjacency-changes {
     detail
 }
 parameters {
     router-id xx.xx.xx.xx
 }
 redistribute {
     connected {
         metric-type 2
         route-map CONNECT
     }
 }

R2 (10.0.0.2/31)

 area 0 {
     network 10.101.0.0/16
     network 10.0.0.2/31
 }
 log-adjacency-changes {
     detail
 }
 parameters {
     router-id yy.yy.yy.yy
 }
 redistribute {
     connected {
         metric-type 2
         route-map CONNECT
     }
 }

On R1, here’s the OSPF neighbour :

 Neighbor yy.yy.yy.yy, interface address 10.0.0.2
    In the area 0.0.0.0 via interface vti0
    Neighbor priority is 1, State is Full, 5 state changes
    DR is 10.0.0.2, BDR is 10.0.0.3
    Options is 0x02 (-|-|-|-|-|-|E|-)
    Dead timer due in 00:00:30
    Neighbor is up for 00:25:50
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0
    Crypt Sequence Number is 0
    Thread Inactivity Timer on
    Thread Database Description Retransmission off
    Thread Link State Request Retransmission off
    Thread Link State Update Retransmission off

Here’s the routes :

 run show ip ospf route

OSPF process 0:
Codes: C - connected, D - Discard, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2

C  10.0.0.2/31 [10] is directly connected, vti0, Area 0.0.0.0
C  10.100.0.0/16 [10] is directly connected, eth1, Area 0.0.0.0

I’m pretty sure I’m being a dummy and not seeing the obvious error here, but shouldn’t R2 advertise 10.101.0.0/16 to R1?

Cheers

I see BR and BDR being mentioned, which are only useful on LANs. Specifiy OSPF interface-type as point-to-point
Make sure VTI tunnel has proper MTU (=it can really handle packets up to MTU), and MTU is equal on both sides

Thanks for your reply.

I’ve set the MTU on both end to 1400, so as far as I know I’m good on that end (ospf woudn’t run otherwise).

I’ll check into the interface-type tomorrow.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.