Hi guys. I am new here. I’m trying to figure out how to make OSPF work on RouterOS 7.15.1.
I’ve upgraded one of my routerboards to V7 (it was 6.9.13), and OSPF stop working.
Here are my OSPF config that was working fine on V6:
/routing ospf instance
set [ find default=yes ] redistribute-connected=as-type-1 router-id=10.0.2.1
/routing ospf interface
add interface=ether2 network-type=point-to-point
/routing ospf network
add area=backbone network=172.18.0.56/30
To confirm,
You have read https://help.mikrotik.com/docs/display/ROS/OSPF… ?
Example config I use (values randomised) on 7.14.3/7.15.1/7.16beta2.
/routing ospf instance
add in-filter-chain=ospf2-in name=ospf2-main originate-default=if-installed out-filter-chain=ospf2-out redistribute=connected,static router-id=loopback routing-table=main
add in-filter-chain=ospf3-in name=ospf3-main originate-default=if-installed out-filter-chain=ospf3-out redistribute=connected,static router-id=loopback routing-table=main version=3
/routing ospf area
add instance=ospf2-main name=ospf2-backbone
add instance=ospf3-main name=ospf3-backbone
/routing ospf area range
add area=ospf2-backbone prefix=172.18.0.0/24
add area=ospf3-backbone prefix=fd00::/56
/routing ospf interface-template
add area=ospf2-backbone auth=sha256 auth-id=0 auth-key=VSMGVztakqtP5Ess8BzqBzp_f46nJfgg4hK interfaces=bonding100 networks=172.18.0.0/30 type=ptp
add area=ospf3-backbone auth=sha256 auth-id=0 auth-key=6dNsFahHgJV2FTTGatzMXC-D2DRKPfH8p0hi7oA interfaces=bonding100 type=broadcast
add area=ospf2-backbone comment="Loopback address" interfaces=lobridge networks=10.255.255.0/24 passive type=ptp
add area=ospf3-backbone comment="Loopback address" interfaces=lobridge passive type=ptp
Not included is the in/out-filter-chain defined under “/route/filter/rule”
“Auth-id=0” is set to ensure compability with BIRD routing daemon.
OSPFv2 uses Point-2-Point “/30” subnet (type=ptp).
OSPFv3 uses Point-2-Point “/64” subnets (type=broadcast).
Loopback bridge defined as passive interface.
“originate-default” is only set on the GW device that has a WAN interface connected (aka. “if-installed”). All other devices has “originate-default” set to “never”.
Can you help me with the in/out-filter-chain defined under “/route/filter/rule”
Example /route/filter/rule chains
add chain=v6private comment="IPv6 Private" disabled=no rule="if (dst in fc00::/7) {accept}"
add chain=v6private comment="supernet" disabled=no rule="if (dst in 2001:db8:beef::/48 && dst-len in 60-64) {accept}"
add chain=v6private comment="loopback" disabled=no rule="if (dst in 2001:db8:beef::/48 && dst-len in 126-128) {accept}"
add chain=v6private disabled=no rule=reject
add chain=v4private comment="do not accept" disabled=no rule="if (dst in 192.168.0.0/24) {reject}"
add chain=v4private comment="IPv4 private - RFC 1918" disabled=no rule="if (dst in 10.0.0.0/8 || dst in 172.16.0.0/12 || dst in 192.168.0.0/16) {accept}"
add chain=v4private comment=CGN disabled=no rule="if (dst in 100.64.0.0/10) {accept}"
add chain=v4private disabled=no rule=reject
Read the manual to get all the good details. Those are not captured in the example above.
https://help.mikrotik.com/docs/display/ROS/Route+Selection+and+Filters