Invalid OSPF cryptographic sequence number in v3.0rc10

RouterOS General
1

I have two RouterBOARD 333 + MikroTik v3.0rc10. One of them is configured as “ap-bride” and the second is configured as “station”. OSPF routing protocol with enabled MD5 authentication does not work properly on MikroTik v3.0rc10.

“ap-bride” OSPF configuration:

/routing ospf set distribute-default=always-as-type-2 redistribute-bgp=no redistribute-connected=no redistribute-rip=no redistribute-static=no router-id=0.0.0.254
/routing ospf area add area-id=0.0.0.1 name=WLAN authentication=md5 type=default
/routing ospf network add area=WLAN network=10.0.0.0/24
/routing ospf interface add interface=wlan1 authentication=md5 authentication-key=XXXXXXXXXXXXXXXX network-type=broadcast priority=255 passive=no

“station” OSPF configuration:

/routing ospf set distribute-default=never redistribute-bgp=no redistribute-connected=no redistribute-rip=no redistribute-static=no router-id=0.0.0.1
/routing ospf area add area-id=0.0.0.1 name=WLAN authentication=md5 type=default
/routing ospf network add area=WLAN network=10.0.0.0/24
/routing ospf network add area=WLAN network=192.168.1.0/24
/routing ospf interface add interface=wlan1 authentication=md5 authentication-key=XXXXXXXXXXXXXXXX network-type=broadcast priority=1 passive=no

Each router quickly moves to state “Full” after booting.

“ap-bride” OSPF side:

 0 router-id=0.0.0.1 address=10.0.0.2 interface=wlan1 priority=1 dr-address=10.0.0.1
   backup-dr-address=10.0.0.2 state="Full" state-changes=7 ls-retransmits=0 ls-requests=0
   db-summaries=0 adjacency=2h15m40s

“station” OSPF side:

 0 router-id=0.0.0.254 address=10.0.0.1 interface=wlan1 priority=255 dr-address=10.0.0.1
   backup-dr-address=10.0.0.2 state="Full" state-changes=19 ls-retransmits=0 ls-requests=0
   db-summaries=0 adjacency=2h16m

But OSPF does not insert any routes in routing table on “station”. Instead I can see the following error message in system log:

04:46:15 route,ospf,info Invalid cryptographic sequence number
04:46:15 route,ospf,info     mine=26
04:46:15 route,ospf,info     received=25
04:46:15 route,ospf,info Discarding packet: MD5 authentication failed
04:46:15 route,ospf,info     source=10.0.0.1

Sometimes OSPF begins to work properly after rebooting but sometimes not. The above configuration works fine on MikroTik v2.9.XX.

2

Upgrade to RC11, if problem is still there then you should contact Mikrotik support. Also don’t forget to send supout files.

3

I have upgraded to v3.0rc11. Nothing changed except one thing. I cannot see the above error message in the system log any more :confused: So I will contact MikroTik technical support.

4

My report is accepted and will be explored later.

5

The problem is fixed in v3.0rc13.