OSPF with RB450 and Cisco

RouterOS General
1

Hello,

I am trying to get a RB450 to communicate via OSPF with a layer 3 Cisco switch. I am having no success so i need some help. Below is the config in the Cisco switch and screen shots of the RB450.
What is wrong with my configuration??? :question:

Thanks all!


Cisco:
router ospf 210
router-id 10.10.210.1
log-adjacency-changes
summary-address 10.10.210.0 255.255.255.248
redistribute eigrp 10 subnets
network 10.10.210.0 0.0.0.7 area 0



RB450:
Ethernet 1:

Ethernet 2:

Ethernet 5:

OSPF Interfaces:

OSPF Area:

OSPF Networks:

OSPF Instance part 1:

OSPF Instance part 2:

2

Argh, screenshots.

Can you post a network diagram that shows how the devices connect with IPs and ports labeled, add the output from “show ip interface brief” and “show ip ospf interfaces” from the IOS router, and post the interface configuration (“show running-config interface x/x”) of the interfaces that connect to the RouterOS router?

Then please also post the ROS output of “/interface print detail”, “/ip address print detail”, “/ip route print detail”, “/routing ospf export”, and “/routing ospf neighbor print detail”?

3

I have a simple setup. In the RB450 are 3 networks 10.10.210.0/29, 10.10.210.8/30, 10.10.210.16/29. The 10.10.210.0/29 network is connected to a L3 Cisco switch via 1 pair of Ubiquity radios acting as a bridge.
The Cisco switch is part of a very large network that is running in EIGRP. Since the RB450 does not have EIGRP I use OSPF and then redistribute it.
The problem is that the RB450 and the Cisco are not sharing routes at all.
Please can you help me figure out the problem??? Whats wrong with my config????


btw, please ignore all config information in my first post.

Cisco

router ospf 10
router-id 10.10.210.1
log-adjacency-changes
summary-address 10.10.210.0 255.255.255.248
redistribute eigrp 10 subnets
network 10.10.210.0 0.0.0.7 area 0
!

BG-TCCOMM-GW#show ip int br
Interface IP-Address OK? Method Status Protocol
Vlan1 10.10.13.13 YES manual up up
Vlan5 10.10.5.130 YES NVRAM up up
Vlan30 unassigned YES NVRAM administratively down down
Vlan35 10.10.35.2 YES NVRAM up up
Vlan44 40.40.11.250 YES NVRAM up up
Vlan50 10.10.5.145 YES NVRAM up up
Vlan51 10.10.5.161 YES NVRAM up up
Vlan55 10.10.5.1 YES NVRAM up up
Vlan60 192.168.10.253 YES NVRAM up up
Vlan111 unassigned YES NVRAM up down
Vlan130 130.100.20.252 YES NVRAM up up
Vlan600 198.152.20.26 YES NVRAM up up
Vlan601 130.200.20.26 YES NVRAM up up
Vlan802 10.10.210.1 YES manual up up
GigabitEthernet0/1 unassigned YES unset up up
GigabitEthernet0/2 unassigned YES unset up up
GigabitEthernet0/3 unassigned YES unset up up
GigabitEthernet0/4 unassigned YES unset up up
GigabitEthernet0/5 unassigned YES unset down down
GigabitEthernet0/6 unassigned YES unset down down
GigabitEthernet0/7 unassigned YES unset administratively down down
GigabitEthernet0/8 unassigned YES unset up up
GigabitEthernet0/9 unassigned YES unset up up
GigabitEthernet0/10 unassigned YES unset up up
GigabitEthernet0/11 unassigned YES unset down down
GigabitEthernet0/12 unassigned YES unset up up
GigabitEthernet0/13 unassigned YES NVRAM down down
GigabitEthernet0/14 unassigned YES unset down down
GigabitEthernet0/15 unassigned YES unset down down
GigabitEthernet0/16 unassigned YES unset down down
GigabitEthernet0/17 unassigned YES unset down down
GigabitEthernet0/18 unassigned YES unset down down
GigabitEthernet0/19 unassigned YES unset up up
GigabitEthernet0/20 unassigned YES unset down down
GigabitEthernet0/21 unassigned YES unset up up
GigabitEthernet0/22 unassigned YES unset up up
GigabitEthernet0/23 unassigned YES unset up up
GigabitEthernet0/24 unassigned YES unset down down
GigabitEthernet0/25 unassigned YES unset down down
GigabitEthernet0/26 30.30.18.250 YES NVRAM up up
GigabitEthernet0/27 unassigned YES unset down down
GigabitEthernet0/28 10.10.254.253 YES NVRAM up up
Tunnel0 unassigned YES NVRAM up down
BG-TCCOMM-GW#


\



BG-TCCOMM-GW# show ip ospf int
Vlan802 is up, line protocol is up
Internet Address 10.10.210.1/29, Area 0
Process ID 10, Router ID 10.10.210.1, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 10.10.210.1, Interface address 10.10.210.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:04
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 40
Last flood scan time is 0 msec, maximum is 9 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)

\




BG-TCCOMM-GW#show running-config interface gi0/23
Building configuration...

Current configuration : 89 bytes
!
interface GigabitEthernet0/23
switchport access vlan 802
switchport mode access
end

BG-TCCOMM-GW#



\

RouterBoard



[admin@MikroTik] > interface print detail
Flags: D - dynamic, X - disabled, R - running, S - slave
0 name="ether1" type="ether" mtu=1500 l2mtu=1526 max-l2mtu=1526

1 R name="ether2" type="ether" mtu=1500 l2mtu=1522 max-l2mtu=1522

2 name="ether3" type="ether" mtu=1500 l2mtu=1522 max-l2mtu=1522

3 name="ether4" type="ether" mtu=1500 l2mtu=1522 max-l2mtu=1522

4 R name="ether5" type="ether" mtu=1500 l2mtu=1522 max-l2mtu=1522
[admin@MikroTik] >


\



[admin@MikroTik] > ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADC dst-address=10.10.210.0/29 pref-src=10.10.210.5 gateway=ether5
gateway-status=ether5 reachable distance=0 scope=10

1 ADC dst-address=10.10.210.8/30 pref-src=10.10.210.9 gateway=ether2
gateway-status=ether2 reachable distance=0 scope=10

2 ADC dst-address=10.10.210.16/29 pref-src=10.10.210.17 gateway=ether1
gateway-status=ether1 unreachable distance=0 scope=200
[admin@MikroTik] >

\



[admin@MikroTik] > routing ospf export

jan/08/1970 15:10:02 by RouterOS 5.6

software id = A9S1-XBQN

/routing ospf instance
set 10 disabled=no distribute-default=always-as-type-1 in-filter=ospf-in
metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=
auto metric-rip=20 metric-static=20 name=10 out-filter=ospf-out
redistribute-bgp=no redistribute-connected=as-type-1
redistribute-other-ospf=as-type-1 redistribute-rip=no
redistribute-static=as-type-1 router-id=10.10.210.5
/routing ospf area
add area-id=0.0.0.210 disabled=no instance=10 name=backbone type=default
set backbone area-id=0.0.0.0 disabled=no instance=10 name=backbone type=
default
/routing ospf interface
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=yes hello-interval=10s instance-id=0
interface=ether4 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=no hello-interval=10s instance-id=10
interface=ether1 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=no hello-interval=10s instance-id=10
interface=ether5 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=no hello-interval=10s instance-id=10
interface=ether2 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
/routing ospf network
add area=backbone disabled=no network=10.10.210.0/29
add area=backbone disabled=no network=10.10.210.8/30
add area=backbone disabled=no network=10.10.210.16/29



\



[admin@MikroTik] > routing ospf neighbor print detail

[admin@MikroTik] >

4

I’m assuming there’s no OSPF configuration on the VLAN 802 interface? Nothing to set authentication or something like that?

I’m a little weirded out by this:

/routing ospf area
add area-id=0.0.0.210 disabled=no instance=10 name=backbone type=default
set backbone area-id=0.0.0.0 disabled=no instance=10 name=backbone type=\
default

That doesn’t look right. There shouldn’t be any set commands in an export for areas, just adds. I don’t even know how a router could end up in that state.

The area ID on the first backbone instance is wrong, and I’m not sure it’s being overwritten right. You’re using area 0 on the Cisco router so if it’s using area 210 on the RouterOS router there’d be an area mismatch and no adjacency would be established. Remove all OSPF networks and areas from the RouterOS router, add a new area 0.0.0.0 to instance 10, and then add the networks back to that area.

If that still doesn’t help start debugging - I’d start on the Cisco router, they’re pretty explicit to why adjacencies are failing. Something along this lines:

configure terminal
logging console debugging
end
terminal monitor
debug ip ospf hello
[...collect output information, wait at least 60 seconds...]
undebug all

That should spell out in clear text why the neighbors aren’t coming up. Feel free to post it if you need help interpreting it.

5

Hello Fewi,
I tried your suggestions but I still cant get them to share routes.

This is all I got from the Cisco debug:
BG-TCCOMM-GW#
22w4d: OSPF: Send hello to 224.0.0.5 area 0 on Vlan802 from 10.10.210.1


Here is the updated config for the RB450:

[admin@MikroTik] > routing ospf export

jan/08/1970 16:45:43 by RouterOS 5.6

software id = A9S1-XBQN

/routing ospf instance
set 10 disabled=no distribute-default=always-as-type-1 in-filter=ospf-in
metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=
auto metric-rip=20 metric-static=20 name=10 out-filter=ospf-out
redistribute-bgp=no redistribute-connected=as-type-1
redistribute-other-ospf=as-type-1 redistribute-rip=no
redistribute-static=as-type-1 router-id=10.10.210.5
/routing ospf area
set area1 area-id=0.0.0.0 disabled=no instance=10 name=area1 type=default
/routing ospf interface
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=yes hello-interval=10s instance-id=0
interface=ether4 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=no hello-interval=10s instance-id=10
interface=ether1 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=no hello-interval=10s instance-id=10
interface=ether5 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
add authentication=none authentication-key="" authentication-key-id=1 cost=10
dead-interval=40s disabled=no hello-interval=10s instance-id=10
interface=ether2 network-type=broadcast passive=no priority=1
retransmit-interval=5s transmit-delay=1s use-bfd=no
/routing ospf network
add area=area1 disabled=no network=10.10.210.0/29
add area=area1 disabled=no network=10.10.210.8/30
add area=area1 disabled=no network=10.10.210.16/29
[admin@MikroTik] >

6

I honestly don’t see what’s wrong.

Can you ping across the shared link in 10.10.210.0/29? The Cisco router is saying it’s never receiving any hellos - are you sure the infrastructure between (the wireless link) isn’t dropping multicast?

7

Yes I can ping across the network just fine.
I got this routing to work once so I know the data path is fine, but i had to do some major modifications, which didnt work. Now I have now switched back to the original config and now it wont work… :angry:

8

Sorry - I don’t see what’s wrong based on what you’ve shared, and I don’t know what else to ask for.

9

What are the firewall rules on the the MikroTik?

Do you specifically allow protocol 89 traffic between the cisco and the MikroTik?

Is the MTU on the cisco’s interface equal to the MTU on the MikroTik?

show int vlan802

We already know the MikroTik is set to 1500 bytes.

On the Cisco, try specifying the area as “0.0.0.0” rather than “0”. That has led to problems between cisco and other non-cisco OSPF implementations in the past. I do not know if it has ever been a problem with cisco to MikroTik.

Does “/log print” say anything about OSPF on the MikroTik?

The OSPF link should be able to come up while you are using an OSPF network type of broadcast, but it will probably be much more stable if you will use an OSPF network type of point-to-point on the cisco and the MikroTik.

Also fewi made a good point. Check the configuration of the UBNT bridges. Make sure you have them in AP WDS and Station WDS mode. On the advanced tab, make sure "Multicast Data: Allow All " is checked.

10

Hello,

I have no firewall setup.
The MTU on the Cisco and RB450 is the same (1500).
I tried setting the area on the Cisco to 0.0.0.0 but that didnt make a difference, the Cisco still displays it as 0.
“log print” does not show anything about ospf.
Multicast is enabled on the Ubiquity radios, and they are setup as AP WDS and Station WDS.


Any more ideas, im totally lost???..

11

Time to get someone else to log into all of the gear and look at things. It will probably be obvious to a second pair of eyes.

12

I figured out the problem :smiley:
The “instance” in the interface setup had to be set to ‘0’. :confused:
Doesn’t make sense to me since but it works…

13

Huh. That does make sense, but according to your output it was set to 10 on all the interfaces other than ether4, and ether4 didn’t show as a running interface at the time.

14

But why would it make sense for it to be 0 on the interfaces while I am running an instance of 10?

15

Duh! I can’t believe I didn’t see it, even after you posted your explanation. Of course it has to be 0. The parameter is ‘instance-id’. The NAME of the instance was ‘10’. But if you do “routing ospf instance print” they all have a number in the first column - that’s the id, the index. The name is irrelevant. Index 0 had the name ‘10’, and you have to refer to the index.

I really can’t believe I didn’t spot that. I guess a numeric name for the instance threw me off, I always use strings (such as ‘backbone’).