SRX

Hi I am Peter L. Thomsen form the Lillebaelt Academy in Odense Denmark.

I am taking my 3 semester students throug a lot of configuratons. First they did the JNCIA training, then IS-IS, IS-IS and OSPFv2 redistribution and now we have to do OSPFv3 and IPv6.

I have a problem getting OSPF3 up and establishning ajencies. Here is a diagram of the test bed  with 2 routers (we have 9 x srx240 and 10 x EX4200 in our lab. The srx are on Junos 12.1.and 11.4 in this case.

This is what it looks like;

 

## Last changed: 2014-09-12 14:46:54 UTC

 

version 12.1.4R;

 

system {

 

    host-name srxC-2;

 

   

 

        }

 

    }

 

    services {

 

        ssh;

 

        telnet;

 

        web-management {

 

            http {

 

                interface ge-0/0/0.0;

 

            }

 

            https {

 

                system-generated-certificate;

 

                interface all;

 

    }

 

    syslog {

 

        file messages {

 

            any critical;

 

            authorization info;

 

        }

 

        file interactive-commands {

 

            interactive-commands any;

 

}

 

interfaces {

 

    ge-0/0/1 {

 

        unit 0 {

 

            family inet6 {

 

                address fe80:0:0:c2::1/64;

 

    }

 

    ge-0/0/2 {

 

        unit 0 {

 

            family inet6 {

 

                address fe80:0:1:c2::2/64;

 

    }

 

    ge-0/0/3 {

 

        unit 0 {

 

            family inet6 {

 

                address fe80:0:1:c1::2/64;

 

    }

 

    lo0 {

 

        unit 0 {

 

            family inet6 {

 

                address fe80:0:c:2::1/128;

 

    }

 

}

 

routing-options {

 

    router-id 6.0.0.0;

 

}

 

protocols {

 

    ospf3 {

 

        area 0.0.0.0 {

 

            interface ge-0/0/2.0;

 

            interface ge-0/0/3.0;

 

            interface lo0.0;

 

            interface ge-0/0/1.0;

 

       

 

}

 

security {

 

    forwarding-options {

 

        family {

 

            inet6 {

 

                mode packet-based;

 

            }

 

            mpls {

 

                mode packet-based;

 

            }

 

   

srxC-1:

## Last changed: 2014-09-12 14:46:54 UTC

version 11.4R7.5;

system {

    host-name srxC-1;

    }

    services {

        ssh;

        telnet;

        web-management {

            http {

                interface ge-0/0/0.0;

            }

            https {

                system-generated-certificate;

                interface all;

           

    }

    syslog {

        file messages {

            any critical;

            authorization info;

        }

        file interactive-commands {

            interactive-commands any;

}

interfaces {

    ge-0/0/1 {

        unit 0 {

            family inet6 {

                address fe80:0:0:c1::1/64;

    }

    ge-0/0/2 {

        unit 0 {

            family inet6 {

                address fe80:0:1:c2::1/64;

    }

    ge-0/0/3 {

        unit 0 {

            family inet6 {

                address fe80:0:1:c1::1/64;

    }

    lo0 {

        unit 0 {

            family inet6 {

                address fe80:0:c:1::1/128;

}

routing-options {

    router-id 6.0.0.0;

}

protocols {

    ospf3 {

        area 0.0.0.0 {

            interface ge-0/0/2.0;

            interface ge-0/0/3.0;

            interface lo0.0;

            interface ge-0/0/1.0;

        }

 

security {

    forwarding-options {

        family {

            inet6 {

                mode packet-based;

            }

            mpls {

                mode packet-based;

            }

 

OSPFv3 never get to "FULL" but stays in "DRother". It never establishes ajencency with the neighbor. We can not ping to the Lo0 address on srxc1 from srxc2 and vice versa. Also the interface ge-0/0/1 (default gateway is not reacheble (no route found) from the opposite router.

What a mess. I thought it was as easy as OSPFv2 and IPv4 as I have worked with that for a long time. Hope anyone have a good suggestion.

I will have to go in tomorrow (Sunday) and se if I can get it to work so the students can have a go at it. 

BR

Peter

 

 

 

 

 

 

Hi,

 

 

Firstly ou are using the same router-id (6.0.0.0) on both routers. You need to fix this otherwise a adjacency will never come up.

 

 

Secondly you should include the topology here if you have other adjacencies that don't come up. And give the output of show ospf3 neighbor

 

 

 

 

--
Click the star for kudos if you think I earned it.
If this post solves your problem, please mark this post as "Accepted Solution".

 

 

Hi and thanks

I am sorry, I forgot to change the router id. They are different, 5.0.0.0 on one and 6.0.0.0 on the other.

When I do the shov ospf3 neighbor I only get the direct connected interfaces (ge-0/0/1 and 0/0/2).

I will get the show commands done in the morning and insert them.

Thanks Peter.

This is the topology!

Hi,

 

could you please review the configurations you have given for your routers?

Apart from the router-id there are other mismatches when you compare with the topology. For instance on srxC-1 according to the configuration excerpt the addess for ge-0/0/1.0 is fe80:0:0:c1::1/64 but on your diagram it is fe80:0:1:c2::1/64.

 

Apart from that here are some indications for generic OSPF troublehsooting

1. check if adjacency does really need to exist
2. check router-id (different on each router)
3. check interface types
   
4. check subnets (must match on multi-access networks)
5. check areas and area types
6. check authentication
7. check MTU

 

On your example the key point seems to be point 3

 

 

--
If this post solves your problem, please mark this post as "Accepted Solution".
Kudos are appreciated

Thanks again. 

I will check it in the morning.

Have a great day.

BR

Peter.

Hi again

I am not using authentication. I think that is an option in both OSPFv2 and v3??

 

BR

Here are the latest configs. Both routers, SRX240, are running Junos 12.1X46-D10.2

Router srxA-1:

i

interfaces {

    ge-0/0/0 {

        description "MGMT Interface - DO NOT DELETE";

        unit 0 {

            family inet {

                address 10.210.14.131/26;

            }

        }

    }

    ge-0/0/1 {

        unit 0 {

            family inet6 {

                address fe80:0:0:a1::1/64;

            }

        }

    }

    ge-0/0/2 {

        unit 0 {

            family inet6 {

                address fe80:0:1:a2::1/64;

            }

        }

    }

    ge-0/0/3 {

        unit 0 {

            family inet6 {

                address fe80:0:1:a1::1/64;

            }

        }

    }

    lo0 {

        unit 0 {

            family inet6 {

                address fe80:0:a:1::1/128;

            }

        }

    }

}

routing-options {

    router-id 10.0.0.1;

}

protocols {

    ospf3 {

        area 0.0.0.0 {

            interface ge-0/0/1.0;

            interface ge-0/0/2.0;

            interface ge-0/0/3.0;

            interface lo0.0;

        }

    }

}

security {

    forwarding-options {

        family {

            inet6 {

                mode packet-based;

            }

            mpls {

                mode packet-based;

            }

 

Router srxA-2:

interfaces {

    ge-0/0/0 {

        description "MGMT Interface - DO NOT DELETE";

        unit 0 {

            family inet {

                address 10.210.14.132/26;

            }

        }

    }

    ge-0/0/1 {

        unit 0 {

            family inet6 {

                address fe80:0:0:a2::1/64;

            }

        }

    }

    ge-0/0/2 {

        unit 0 {

            family inet6 {

                address fe80:0:1:a2::2/64;

            }

        }

    }

    ge-0/0/3 {

        unit 0 {

            family inet6 {

                address fe80:0:1:a1::2/64;

            }

        }

    }

    lo0 {

        unit 0 {

            family inet6 {

                address fe80:0:a:2::1/128;

            }

        }

    }

}

routing-options {

    router-id 10.0.0.2;

}

protocols {

    ospf3 {

        area 0.0.0.0 {

            interface ge-0/0/1.0;

            interface ge-0/0/2.0;

            interface ge-0/0/3.0;

            interface lo0.0;

        }

    }

}

security {

    forwarding-options {

        family {

            inet6 {

                mode packet-based;

            }

            mpls {

                mode packet-based;

            }

        }

    }

}

 

lab@srxA-2>

 

Here are a couple of show commands from srxA-2:

lab@srxA-2> show ospf3 database

 

    OSPF3 database, Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Router      0.0.0.0          10.0.0.1         0x80000004   909  0x2196  56

Router     *0.0.0.0          10.0.0.2         0x80000003   909  0x1d9a  56

Network    *0.0.0.3          10.0.0.2         0x80000002   915  0x41a0  32

Network    *0.0.0.4          10.0.0.2         0x80000001   909  0x39a8  32

 

    OSPF3 Link-Local database, interface ge-0/0/1.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link       *0.0.0.2          10.0.0.2         0x80000002   924  0x93d0  44

 

    OSPF3 Link-Local database, interface ge-0/0/2.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link        0.0.0.3          10.0.0.1         0x80000002   919  0x9bc7  44

Link       *0.0.0.3          10.0.0.2         0x80000002   924  0xabb5  44

 

    OSPF3 Link-Local database, interface ge-0/0/3.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link        0.0.0.4          10.0.0.1         0x80000002   919  0x83df  44

Link       *0.0.0.4          10.0.0.2         0x80000002   924  0x93cd  44

 

    OSPF3 Link-Local database, interface lo0.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link       *0.0.0.1          10.0.0.2         0x80000003   336  0x4baf  44

 

lab@srxA-2>

 

lab@srxA-2> show route

 

inet.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

 

10.210.14.132/32   *[Local/0] 00:17:35

                      Reject

 

inet6.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

 

fe80:0:0:a2::/64   *[Direct/0] 00:17:19

                    > via ge-0/0/1.0

fe80:0:0:a2::1/128 *[Local/0] 00:17:34

                      Local via ge-0/0/1.0

fe80:0:1:a1::/64   *[Direct/0] 00:17:19

                    > via ge-0/0/3.0

fe80:0:1:a1::2/128 *[Local/0] 00:17:34

                      Local via ge-0/0/3.0

fe80:0:1:a2::/64   *[Direct/0] 00:17:19

                    > via ge-0/0/2.0

fe80:0:1:a2::2/128 *[Local/0] 00:17:34

                      Local via ge-0/0/2.0

fe80:0:a:2::1/128  *[Direct/0] 00:18:36

                    > via lo0.0

ff02::5/128        *[OSPF3/10] 00:18:36, metric 1

                      MultiRecv

 

lab@srxA-2>

 

A couple of "ping" from srxA-2:

From A-2 to the lo0 of srxA-1

lab@srxA-2> ping inet6 fe80:0:a:1::1

PING6(56=40+8+8 bytes) :: --> fe80:0:a:1::1

ping: sendmsg: No route to host

ping6: wrote fe80:0:a:1::1 16 chars, ret=-1

ping: sendmsg: No route to host

ping6: wrote fe80:0:a:1::1 16 chars, ret=-1

ping: sendmsg: No route to host

ping6: wrote fe80:0:a:1::1 16 chars, ret=-1

^C

--- fe80:0:a:1::1 ping6 statistics ---

3 packets transmitted, 0 packets received, 100% packet loss

 

lab@srxA-2>

 

Ping the LAN interface on srxA-1:

lab@srxA-2> ping inet6 fe80:0:0:a1::1

PING6(56=40+8+8 bytes) :: --> fe80:0:0:a1::1

ping: sendmsg: No route to host

ping6: wrote fe80:0:0:a1::1 16 chars, ret=-1

ping: sendmsg: No route to host

ping6: wrote fe80:0:0:a1::1 16 chars, ret=-1

ping: sendmsg: No route to host

ping6: wrote fe80:0:0:a1::1 16 chars, ret=-1

^C

--- fe80:0:0:a1::1 ping6 statistics ---

3 packets transmitted, 0 packets received, 100% packet loss

 

lab@srxA-2>

When ping'ng the "local" lo0 and ge-0/0/1 there is no problem.

 

another show overview

 

lab@srxA-2> show ospf3 overview

Instance: master

  Router ID: 10.0.0.2

  Route table index: 0

  LSA refresh time: 50 minutes

  Area: 0.0.0.0

    Stub type: Not Stub

    Area border routers: 0, AS boundary routers: 0

    Neighbors

      Up (in full state): 2

  Topology: default (ID 0)

    Prefix export count: 0

    Full SPF runs: 6

    SPF delay: 0.200000 sec, SPF holddown: 5 sec, SPF rapid runs: 3

    Backup SPF: Not Needed

 

lab@srxA-2>

 

lab@srxA-2> show ospf3 interface

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/1.0          DR      0.0.0.0         10.0.0.2        0.0.0.0            0

ge-0/0/2.0          DR      0.0.0.0         10.0.0.2        10.0.0.1           1

ge-0/0/3.0          DR      0.0.0.0         10.0.0.2        10.0.0.1           1

lo0.0               DR      0.0.0.0         10.0.0.2        0.0.0.0            0

 

lab@srxA-2> show ospf3 interface extensive

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/1.0          DR      0.0.0.0         10.0.0.2        0.0.0.0            0

  Address fe80:0:0:a2::1, Prefix-length 64

  OSPF3-Intf-index 2, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 0, Router LSA ID: -

  DR addr fe80:0:0:a2::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

ge-0/0/2.0          DR      0.0.0.0         10.0.0.2        10.0.0.1           1

  Address fe80:0:1:a2::2, Prefix-length 64

  OSPF3-Intf-index 3, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 1, Router LSA ID: 0

  DR addr fe80:0:1:a2::2, BDR addr fe80:0:1:a2::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

ge-0/0/3.0          DR      0.0.0.0         10.0.0.2        10.0.0.1           1

  Address fe80:0:1:a1::2, Prefix-length 64

  OSPF3-Intf-index 4, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 1, Router LSA ID: 0

  DR addr fe80:0:1:a1::2, BDR addr fe80:0:1:a1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

lo0.0               DR      0.0.0.0         10.0.0.2        0.0.0.0            0

  Address fe80:0:a:2::1, Prefix-length 128

  OSPF3-Intf-index 1, Type LAN, MTU 65535, Cost 0, Priority 128

  Adj count: 0, Router LSA ID: -

  DR addr fe80:0:a:2::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

 

lab@srxA-2>

 

And n ow srxA-1:

 

lab@srxA-1> show route

 

inet.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

 

10.210.14.131/32   *[Local/0] 00:32:24

                      Reject

 

inet6.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

 

fe80:0:0:a1::/64   *[Direct/0] 00:32:15

                    > via ge-0/0/1.0

fe80:0:0:a1::1/128 *[Local/0] 00:32:24

                      Local via ge-0/0/1.0

fe80:0:1:a1::/64   *[Direct/0] 00:32:08

                    > via ge-0/0/3.0

fe80:0:1:a1::1/128 *[Local/0] 00:32:23

                      Local via ge-0/0/3.0

fe80:0:1:a2::/64   *[Direct/0] 00:32:08

                    > via ge-0/0/2.0

fe80:0:1:a2::1/128 *[Local/0] 00:32:24

                      Local via ge-0/0/2.0

fe80:0:a:1::1/128  *[Direct/0] 00:33:16

                    > via lo0.0

ff02::5/128        *[OSPF3/10] 00:33:17, metric 1

                      MultiRecv

 

lab@srxA-1>

 

lab@srxA-1> show ospf3 database

 

    OSPF3 database, Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Router     *0.0.0.0          10.0.0.1         0x80000004  1934  0x2196  56

Router      0.0.0.0          10.0.0.2         0x80000003  1936  0x1d9a  56

Network     0.0.0.3          10.0.0.2         0x80000002  1942  0x41a0  32

Network     0.0.0.4          10.0.0.2         0x80000001  1936  0x39a8  32

 

    OSPF3 Link-Local database, interface ge-0/0/1.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link       *0.0.0.2          10.0.0.1         0x80000003   625  0x89db  44

 

    OSPF3 Link-Local database, interface ge-0/0/2.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link       *0.0.0.3          10.0.0.1         0x80000003    62  0x99c8  44

Link        0.0.0.3          10.0.0.2         0x80000003   554  0xa9b6  44

 

    OSPF3 Link-Local database, interface ge-0/0/3.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link       *0.0.0.4          10.0.0.1         0x80000002  1944  0x83df  44

Link        0.0.0.4          10.0.0.2         0x80000003   150  0x91ce  44

 

    OSPF3 Link-Local database, interface lo0.0 Area 0.0.0.0

 Type       ID               Adv Rtr           Seq         Age  Cksum  Len

Link       *0.0.0.1          10.0.0.1         0x80000003  1189  0x43b9  44

 

lab@srxA-1>

 

lab@srxA-1> show ospf3 interface

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/1.0          DR      0.0.0.0         10.0.0.1        0.0.0.0            0

ge-0/0/2.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

ge-0/0/3.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

lo0.0               DR      0.0.0.0         10.0.0.1        0.0.0.0            0

 

lab@srxA-1> show ospf3 interface extensive

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/1.0          DR      0.0.0.0         10.0.0.1        0.0.0.0            0

  Address fe80:0:0:a1::1, Prefix-length 64

  OSPF3-Intf-index 2, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 0, Router LSA ID: -

  DR addr fe80:0:0:a1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

ge-0/0/2.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

  Address fe80:0:1:a2::1, Prefix-length 64

  OSPF3-Intf-index 3, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 1, Router LSA ID: 0

  DR addr fe80:0:1:a2::2, BDR addr fe80:0:1:a2::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

ge-0/0/3.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

  Address fe80:0:1:a1::1, Prefix-length 64

  OSPF3-Intf-index 4, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 1, Router LSA ID: 0

  DR addr fe80:0:1:a1::2, BDR addr fe80:0:1:a1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

lo0.0               DR      0.0.0.0         10.0.0.1        0.0.0.0            0

  Address fe80:0:a:1::1, Prefix-length 128

  OSPF3-Intf-index 1, Type LAN, MTU 65535, Cost 0, Priority 128

  Adj count: 0, Router LSA ID: -

  DR addr fe80:0:a:1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

 

lab@srxA-1>

 

lab@srxA-1> show ospf3 interface

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/1.0          DR      0.0.0.0         10.0.0.1        0.0.0.0            0

ge-0/0/2.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

ge-0/0/3.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

lo0.0               DR      0.0.0.0         10.0.0.1        0.0.0.0            0

 

lab@srxA-1> show ospf3 interface extensive

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/1.0          DR      0.0.0.0         10.0.0.1        0.0.0.0            0

  Address fe80:0:0:a1::1, Prefix-length 64

  OSPF3-Intf-index 2, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 0, Router LSA ID: -

  DR addr fe80:0:0:a1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

ge-0/0/2.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

  Address fe80:0:1:a2::1, Prefix-length 64

  OSPF3-Intf-index 3, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 1, Router LSA ID: 0

  DR addr fe80:0:1:a2::2, BDR addr fe80:0:1:a2::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

ge-0/0/3.0          BDR     0.0.0.0         10.0.0.2        10.0.0.1           1

  Address fe80:0:1:a1::1, Prefix-length 64

  OSPF3-Intf-index 4, Type LAN, MTU 1500, Cost 1, Priority 128

  Adj count: 1, Router LSA ID: 0

  DR addr fe80:0:1:a1::2, BDR addr fe80:0:1:a1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

lo0.0               DR      0.0.0.0         10.0.0.1        0.0.0.0            0

  Address fe80:0:a:1::1, Prefix-length 128

  OSPF3-Intf-index 1, Type LAN, MTU 65535, Cost 0, Priority 128

  Adj count: 0, Router LSA ID: -

  DR addr fe80:0:a:1::1

  Hello 10, Dead 40, ReXmit 5, Not Stub

  Protection type: None

 

lab@srxA-1>

 

Theneighbor seen from srx A-1:

lab@srxA-1> show ospf3 neighbor

ID               Interface              State     Pri   Dead

10.0.0.2         ge-0/0/2.0             Full      128     39

  Neighbor-address fe80:0:1:a2::2

10.0.0.2         ge-0/0/3.0             Full      128     38

  Neighbor-address fe80:0:1:a1::2

 

lab@srxA-1>

 

and from srxA-2:

lab@srxA-2> show ospf3 neighbor

ID               Interface              State     Pri   Dead

10.0.0.1         ge-0/0/2.0             Full      128     32

  Neighbor-address fe80:0:1:a2::1

10.0.0.1         ge-0/0/3.0             Full      128     35

  Neighbor-address fe80:0:1:a1::1

 

lab@srxA-2>

 

They both say "State FULL" and still I cant get hols of the ge-0/0/1 and lo0 from the opposite router??

This puzzeles me??

 

Anyone have a good idea?? I am getiing a bit desperate now.

BR Peter.

 

 

 

 

I found the solutionn by just readin RFC 4193, Unique Local addresses and now the lot works.

fe80 is Link Local and NOT ROUTEABLE in IPv6, it has to be fc00 or fd00, Unique Local addresses and then it all works fine.

 

Have a great day

Peter

Hi,

 

Glad that you found the issue.

As you said link-local addresses (fe80::/16) are not routable.