OSPF setup

RouterOS Forwarding Protocols
21

So what am I doing wrong?

Sent from my SAMSUNG-SM-G935A using Tapatalk

22

In my experience you need to have a network under ospf network that covers the inter connectivity between routers. then on each of the routers you should put the network that is behind that router that you would like to share. from what I can see you have missing networks on the routers. https://wiki.mikrotik.com/wiki/Manual:OSPF-examples The only network you have added is your loopback network.

23

How many more networks… I already have a network for the 2 routers…

24

Please can you

routing ospf export

from each router and then tell us what the ip address of each router is on the side that is connected to the switch and main router.

25

Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running.

Can you help me identify which rule it may be ?

Thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

26

Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running.

Can you help me identify which rule it may be ?

Thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

27

Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running.

Can you help me identify which rule it may be ?

Thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

28

I added this rule to my firewall to allow ospf

add action=accept chain=input comment=OSPF dst-address=224.0.0.5
29

you must have some rules to allow ospf in firewall like

$IPTABLES -A INPUT -i eth1 -p 2 -j ACCEPT # IGMP
$IPTABLES -A INPUT -i eth1 -p 89 -j ACCEPT # OSPF

(its protocol 2-egp and 89-ospf, NOT tcp ports)

30

Let me try this.. thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

31

Here eth1 is the outgoing port of OSPF correct?

Sent from my SAMSUNG-SM-G935A using Tapatalk

32

yes, this was example from iptables, but rule is for incoming

33

The rule that was causing your headaches is:

add action=drop chain=input comment="Drop everything else"

If you want to drop everything in the input chain the you must allow OSPF communication. To get a better idea of how this works you could use Wireshark in a lab environment or download a cap from their Sample Captures Library.

Simple OSPF initialization
https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=ospf.cap

In the capture you will notice four important addresses:

  • Router A
    Router B
    224.0.0.5
    224.0.0.6

Since you are only dropping traffic on the Input chain then that is were you should create a new set of rules; above the drop all rule. If you were to do the same on the output chain the a separate set of filter rules must be applied to that chain as well for OSPF to communicate properly.

Hope this helps!

34

Thanks.. let me look into this…

Sent from my SAMSUNG-SM-G935A using Tapatalk

35

So what does the firewall rule need to look like to allow the OSPF communication? I am also have a problem as I have a drop all rule in place