ROS7 OSPF-TE opaque LSA's

RouterOS Forwarding Protocols
1

Hi All,

Bit of a weird one here. We have a MikroTik ROS7 router that is failing to form an OSPF adjacency with a neighboring Arista switch.

On the Mikrotik side, the neighbor enters state=FULL however the Arista side the neighbor stays in state=LOADING.

The Arista reports in the log

 Rib: ospf::adj   1:OSPF Recv: Opaque LSA from neighbor that did not set the opaque option, id 1.0.0.0 advrt 100.100.103.2

100.100.103.2 is the router-id of the Mikrotik.

If I disable OSPF-TE the neighbor goes to state=FULL on both sides

Something to note is that this worked when the Mikrotik was a ROS6 device, however I had other weird issues which I hoped would be solved in ROS7.

Any advise appreciated

Kind regards

2

Hi All,

Just to add to this. I have setup a GNS3 lab for this, to take the testing off the live environment.

If I add a vyos 1.4 (basically FRR 8.5.2) to the mix, I get a similar error vyos side

Nov 23 06:03:28 ospfd[870]: [S5PCG-77H23] Packet[DD]: Neighbor 10.0.1.1 Negotiation done (Master).
Nov 23 06:03:28 ospfd[870]: [W5JSG-1RC06][EC 134217741] LSA[Type10:1.0.0.0] from 10.0.1.1: Opaque capability mismatch?
Nov 23 06:03:33 ospfd[870]: [S5PCG-77H23] Packet[DD]: Neighbor 10.0.1.1 Negotiation done (Master).
Nov 23 06:03:33 ospfd[870]: [W5JSG-1RC06][EC 134217741] LSA[Type10:1.0.0.0] from 10.0.1.1: Opaque capability mismatch?
Nov 23 06:03:38 ospfd[870]: [S5PCG-77H23] Packet[DD]: Neighbor 10.0.1.1 Negotiation done (Master).
Nov 23 06:03:38 ospfd[870]: [W5JSG-1RC06][EC 134217741] LSA[Type10:1.0.0.0] from 10.0.1.1: Opaque capability mismatch?
Nov 23 06:03:43 ospfd[870]: [S5PCG-77H23] Packet[DD]: Neighbor 10.0.1.1 Negotiation done (Master).
Nov 23 06:03:43 ospfd[870]: [W5JSG-1RC06][EC 134217741] LSA[Type10:1.0.0.0] from 10.0.1.1: Opaque capability mismatch?
Nov 23 06:03:48 ospfd[870]: [S5PCG-77H23] Packet[DD]: Neighbor 10.0.1.1 Negotiation done (Master).
Nov 23 06:03:48 ospfd[870]: [W5JSG-1RC06][EC 134217741] LSA[Type10:1.0.0.0] from 10.0.1.1: Opaque capability mismatch?
Nov 23 06:03:48 ospfd[870]: [G51J2-0949Y][EC 134217741] Packet[DD]: Neighbor 10.0.1.1 Negotiation fails.

Seems like ROS 7 is not correctly implementing opaque areas. Perhaps we need an option under the instance or interface-template to enable opaque lsa’s?

From the vyos’s ospf neighbor perspective.

R-ID: 10.0.1.1 is ROS7
R-ID: 10.0.1.2 is EOS

vyos# sh ip ospf neighbor detail 
 Neighbor 10.0.1.1, interface address 10.0.0.1
    In the area 0.0.0.0 via interface eth0
    Neighbor priority is 0, State is ExStart/DROther, 498 state changes
    Most recent state change statistics:
      Progressive change 1.014s ago
      Regressive change 1.012s ago, due to SeqNumberMismatch
    DR is 10.0.0.3, BDR is 10.0.0.2
*****    Options 2 *|-|-|-|-|-|E|-
    Dead timer due in 39.621s
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0
    Thread Inactivity Timer on
    Thread Database Description Retransmision on
    Thread Link State Request Retransmission off
    Thread Link State Update Retransmission off

    Graceful restart Helper info:
      Graceful Restart HELPER Status : None

 Neighbor 10.0.1.2, interface address 10.0.0.2
    In the area 0.0.0.0 via interface eth0
    Neighbor priority is 1, State is Full/Backup, 14 state changes
    Most recent state change statistics:
      Progressive change 5m46s ago
      Regressive change 5m50s ago, due to 1-WayReceived
    DR is 10.0.0.3, BDR is 10.0.0.2
******    Options 66 *|O|-|-|-|-|E|-
    Dead timer due in 39.833s
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0
    Thread Inactivity Timer on
    Thread Database Description Retransmision off
    Thread Link State Request Retransmission off
    Thread Link State Update Retransmission on

    Graceful restart Helper info:
      Graceful Restart HELPER Status : None

I will add a ROS6 to the bench and update the post

Kind regards

3

This problem has been resolved in RouterOS 7.12 and newer.

The pace of development for RouterOS v7 is very fast, so it is important that you post the exact version of RouterOS v7 that you are running to make it easier for people to help you.

4

Thank you for your reply, in the bench I am running ROS7.11.2

[admin@MikroTik] > system/package/print
Columns: NAME, VERSION
# NAME      VERSION
0 routeros  7.11.2

Out in the field where I picked this up I am running ROS7.12

/system/package/print 
Columns: NAME, VERSION
# NAME      VERSION
0 routeros  7.12

I will upgrade the bench to 7.12 and revert.

Kind regards

5

Hi

[admin@MikroTik] > system/package/print
Columns: NAME, VERSION
# NAME      VERSION
0 routeros  7.12.1

Arista still reporting issues

 1:OSPF Recv: Opaque LSA from neighbor that did not set the opaque option, id 1.0.0.2 advrt 10.0.1.1

Same with the vyos

vyos@vyos:~$ show ip ospf neighbor detail
 Neighbor 10.0.1.1, interface address 10.0.0.1
    In the area 0.0.0.0 via interface eth0
    Neighbor priority is 0, State is ExStart/DROther, 15 state changes
    Most recent state change statistics:
      Progressive change 4.692s ago
      Regressive change 4.691s ago, due to SeqNumberMismatch
    DR is 10.0.0.2, BDR is 10.0.0.3
    Options 2 *|-|-|-|-|-|E|-
    Dead timer due in 30.333s
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0
    Thread Inactivity Timer on
    Thread Database Description Retransmision on
    Thread Link State Request Retransmission off
    Thread Link State Update Retransmission off

    Graceful restart Helper info:
      Graceful Restart HELPER Status : None

 Neighbor 10.0.1.2, interface address 10.0.0.2
    In the area 0.0.0.0 via interface eth0
    Neighbor priority is 1, State is Full/DR, 6 state changes
    Most recent state change statistics:
      Progressive change 33.686s ago
    DR is 10.0.0.2, BDR is 10.0.0.3
    Options 66 *|O|-|-|-|-|E|-
    Dead timer due in 35.299s
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0
    Thread Inactivity Timer on
    Thread Database Description Retransmision off
    Thread Link State Request Retransmission on
    Thread Link State Update Retransmission on

    Graceful restart Helper info:
      Graceful Restart HELPER Status : None

Kind regards

6

Take packet captures from RouterOS side and send them to support@mikrotik.com

There must be another variant of Opaque LSA that is being rejected by RouterOS v7.

7

I have sent them a mail, I have not had much luck in getting support in the past, unfortunately. That is why I came to the forum first :smiley:

Kind regards

8

My experience is that Mikrotik support are very responsive at the moment. Particularly to WiFi and Routing related tickets.

9

Indeed. Got a response.

The identified the bug and will implement a fix in the next release

10

Awesome !

What’s new in 7.13beta3 (2023-Nov-24 13:52):
*) ospf - fixed LSA Type3 advertisement for OSPFv2;

11

I upgraded my bench, but no cigar unfortunately. I am still getting.

1:OSPF Recv: Opaque LSA from neighbor that did not set the opaque option, id 1.0.0.0 advrt 10.0.1.1

I have updated my ticket with support.

12

What’s new in 7.13rc2 (2023-Nov-30 17:02):
*) ospf - fixed missing opaque bit in opaque LSA;

Now we are cooking. Showing adjancencies now on the bench. Just waiting on the stable release then I will roll out to the field and continue testing