NetScreen
[Top] [All Lists]

[nn] Route based VPN Neighbors Stuck in Exstart/Exchange State

To: nn@qorbit.net
Subject: [nn] Route based VPN Neighbors Stuck in Exstart/Exchange State
From: "fw@doehni.dyndns.org" <fw@doehni.dyndns.org>
Date: Sun, 17 Dec 2006 09:12:50 +0100 (CET)
Delivered-to: sp-com-lists@consult.net
Delivered-to: ns-list2@consult.net
Delivered-to: nn@qorbit.net
Importance: Normal
List-archive: <http://www.qorbit.net/nn>
List-help: <mailto:nn-request@qorbit.net?subject=help>
List-id: "Netscreen mailing list for netscreen admins." <nn.qorbit.net>
List-post: <mailto:nn@qorbit.net>
List-subscribe: <http://qorbit.net/mailman/listinfo/nn>, <mailto:nn-request@qorbit.net?subject=subscribe>
List-unsubscribe: <http://qorbit.net/mailman/listinfo/nn>, <mailto:nn-request@qorbit.net?subject=unsubscribe>
Sender: nn-bounces@qorbit.net
User-agent: SquirrelMail/1.4.2
Hi List,
we setup a hub&spoke vpn based on junipers route based VPN with OSPF P2MP
interfaces on the hub. We created two OSPF stub areas - there contains
about ~27 OSPF neigbors each. All spokes (ns5gt+, 5.3.0r2) are connected
with ADSL 2000 and ADSL 1000 and the dual hubs (ns50adv, 5.3.0r4) with
SDSL.

Sometimes the neighbors stuck in OSPF exstart/exchange state and we cant
identify why. We did a debug ospf all on a spoke (192.168.10.x are the
tunnel interfaces) see above. Does anyone know why the spokes doesnt
recognize a  DR/BDR? (dr 0.0.0.0 bdr 0.0.0.0) We configured the hubs with
a higher OSPF priority as the spokes where never elected as DR/BDR. Or
could mismatching MTU´s be the problem?

any hint? thx!
doehni

ospf: send hello dr 10.10.10.1 bdr 0.0.0.0 active neighbors:
ospf: send hello pkt to 224.0.0.5 on trust len 44
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 144 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->224.0.0.5
ospf: recv hello from neighbor 192.168.10.1 10.0.100.8 (Id) in area
0.0.0.10 state EX_START
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: send hello dr 0.0.0.0 bdr 0.0.0.0 active neighbors: 10.0.100.8
ospf: send hello pkt to 224.0.0.5 on tunnel.1 len 48
ospf: retransmit timer expired in vrouter trust-vr for neighbor 10.0.100.8
on tunnel.1
ospf: send DBD to 10.0.100.8 on tunnel.1 seq 0x52 flag INIT,MORE,MASTER
len 32
ospf: send pkt to 224.0.0.5 on tunnel.1 len 32
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: send hello dr 0.0.0.0 bdr 0.0.0.0 active neighbors:
10.0.100.9
ospf: send hello pkt to 224.0.0.5 on tunnel.2 len 48
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)
ospf: process rx pak len 88 from 192.168.10.1 on tunnel.1 in vr trust-vr
router-id 10.10.10.1
ospf: recv pkt on tunnel.1, 192.168.10.1->192.168.10.27
ospf: ignore LSU, nbr 192.168.10.1 state (EX_START)


_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn

<Prev in Thread] Current Thread [Next in Thread>
  • [nn] Route based VPN Neighbors Stuck in Exstart/Exchange State, fw@doehni.dyndns.org <=