04-29-2012 03:01 PM
I am sorry but a very basic question. I have site to site route based IPSEC VPN with five spokes and I created separate st0 (tunnel interface) interfaces for each spoke. I am running OSPF over these tunnels.
If I use the OSPF router ID as one of the st0 interface IP (set routing-options router-id ) and that tunnel is down and ultimately st0 interface is also down then there is any impact on OSPF routing on other tunnel interfaces?
Solved! Go to Solution.
04-29-2012 11:09 PM
I don't think so because you are not in NBMA environment which means that no DR & BDR election just point-to-point so changing router-id shouldn't affect your OSPF performance
2* JNCIE (SEC # 159, SP # 1059),JNCIP-ENT
[Click the "Star" for Kudos if you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]
04-30-2012 08:11 AM
04-30-2012 09:01 AM
OK. Let me repharase my question. If I configure router-id using belwo command.
set routing-options router-id 192.168.1.1
This IP 192.168.1.1 is assigned to one tunnel interface. If tunnel interface is down then router-id would be change? I believe I specified the router-id using command and there is no relation with tunnel interface. Am I correct in understanding?
04-30-2012 10:04 AM
04-30-2012 04:09 PM
As you note, the router id is explictly configured in your scenario, so it will not change. The impact of the interface being down will be that the router will not be reachable as an ospf neighbor.
But in your design, if the tunnel is the only way the neighbor relationship can establish, then this might not matter.
That is why Ron is saying it is safer to use an ip address that is always up as the router id. Since the loopback can never go down, you can always respond to those neighbor requests regardless of which interface receives the traffic. Even if the primary path interface is down.
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCDA JNCDS-DC JNCDS-SEC
ACE PanOS 6 ACE PanOS 7