I'm trying to configure my CRS309 as an alternative to cisco 3750 switches.
Bridge VLAN filtering with OSPF works really great. However, when I turn on L3 HW offload, OSPF stops working after like an hour. So for some time, it works like intended. I tried to route close to 1gb/s with 2% processor usage. After rebooting the CRS, my OSPF will never connect again, actually it looks like connected when I check it on cisco side, but I can't even ping OSPF IP and of course CRS is unreachable. As soon as I turn off L3 HW offload through mac telnet, OSPF starts to work in a second. Is it a bug or am I missing something? I'm runnig latest FW 7.1 beta6
My setup is very simple:
Code: Select all
/interface bridge
add name=bridge1 protocol-mode=none vlan-filtering=yes
/interface vlan
add comment=OSPF interface=bridge1 name=vlan500 vlan-id=500
/routing ospf instance
add name=ospf-instance-1 out-filter-chain=ospf_out
/routing ospf area
add instance=ospf-instance-1 name=area-0.0.0.0
/interface bridge port
add bridge=bridge1 interface=sfp-sfpplus1
add bridge=bridge1 interface=sfp-sfpplus2
add bridge=bridge1 interface=sfp-sfpplus3
add bridge=bridge1 interface=sfp-sfpplus4
add bridge=bridge1 interface=sfp-sfpplus5
add bridge=bridge1 interface=sfp-sfpplus6
add bridge=bridge1 interface=sfp-sfpplus7
add bridge=bridge1 interface=sfp-sfpplus8
/interface bridge vlan
add bridge=bridge1 tagged=sfp-sfpplus8,bridge1 vlan-ids=500
/ip address
add address=192.168.164.10/30 interface=vlan500 network=192.168.164.8
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=\
established,related hw-offload=no
add action=accept chain=forward
/routing filter rule
add chain=ospf_out rule=\
"if [protocol static] then={action do=accept; ospf-ext-type type1}"
add chain=ospf_out rule=\
"if [protocol connected ] then={action do=accept; ospf-ext-type type1}"
add chain=ospf_out rule="if ([prfx value=dst<equal>0.0.0.0/0] && [protocol sta\
tic]) then={action do=reject}"
/routing ospf area range
/routing ospf interface-template
add area=area-0.0.0.0 cost=10000 interfaces=vlan500 networks=192.168.164.8/30 \
priority=1
Cisco interface configuration:
interface Vlan500
ip address 192.168.164.9 255.255.255.252
ip ospf authentication null
ip ospf cost 10000