OSPF over IPSEC & route learning

[Taledo]

Hello all, its me again.

Having set up my IPSEC tunnel properly with VTI interfaces, I want to use OSPF to share internal routes between my two routers.

However, I cannot figure out why I can’t get routes to be, well, shared.

Simplified diagram of the network :

Here’s my OSPF config :
R1 (10.0.0.3/31)

 area 0 {
     network 10.100.0.0/16
     network 10.0.0.2/31
 }
 default-information {
     originate {
         always
         metric 10
         metric-type 2
     }
 }
 log-adjacency-changes {
     detail
 }
 parameters {
     router-id xx.xx.xx.xx
 }
 redistribute {
     connected {
         metric-type 2
         route-map CONNECT
     }
 }

R2 (10.0.0.2/31)

 area 0 {
     network 10.101.0.0/16
     network 10.0.0.2/31
 }
 log-adjacency-changes {
     detail
 }
 parameters {
     router-id yy.yy.yy.yy
 }
 redistribute {
     connected {
         metric-type 2
         route-map CONNECT
     }
 }

On R1, here’s the OSPF neighbour :

 Neighbor yy.yy.yy.yy, interface address 10.0.0.2
    In the area 0.0.0.0 via interface vti0
    Neighbor priority is 1, State is Full, 5 state changes
    DR is 10.0.0.2, BDR is 10.0.0.3
    Options is 0x02 (-|-|-|-|-|-|E|-)
    Dead timer due in 00:00:30
    Neighbor is up for 00:25:50
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0
    Crypt Sequence Number is 0
    Thread Inactivity Timer on
    Thread Database Description Retransmission off
    Thread Link State Request Retransmission off
    Thread Link State Update Retransmission off

Here’s the routes :

 run show ip ospf route

OSPF process 0:
Codes: C - connected, D - Discard, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2

C  10.0.0.2/31 [10] is directly connected, vti0, Area 0.0.0.0
C  10.100.0.0/16 [10] is directly connected, eth1, Area 0.0.0.0

I’m pretty sure I’m being a dummy and not seeing the obvious error here, but shouldn’t R2 advertise 10.101.0.0/16 to R1?

Cheers

[16again]

I see BR and BDR being mentioned, which are only useful on LANs. Specifiy OSPF interface-type as point-to-point
Make sure VTI tunnel has proper MTU (=it can really handle packets up to MTU), and MTU is equal on both sides

[Taledo]

Thanks for your reply.

I’ve set the MTU on both end to 1400, so as far as I know I’m good on that end (ospf woudn’t run otherwise).

I’ll check into the interface-type tomorrow.