Community discussions

MikroTik App
 
giulianoz
newbie
Topic Author
Posts: 27
Joined: Sat Apr 08, 2017 6:44 pm

Ros7 Ospf over wire guard, no neighbours

Sat Jul 22, 2023 1:39 pm

Hello,
Sorry for the silly question , but I could not figure it out and I am pretty confused buy the informations I ha found around…

Goal: use Ospf between two routers (Hax3 and ac3) connected via wire guard.
Issue: I can’t get any neighbour in each routers
Software: router is 7.10.1

Site 1 is an ac3 behind a cable modem and connects to site 2 (ddns public ip, vdsl2 modem, wire guard port forwarded to hax3)

Site 1:
/ip addres
add address=192.168.100.1/24 interface=LAN network=192.168.100.0
add address=192.168.2.2/24 interface=wg1 network=192.168.2.0
add address=10.0.0.2/24 interface=lo0 network=10.0.0.0

/routing id
add id=10.0.0.2 name=id-1
/routing ospf instance
add disabled=no name=ospf1
/routing ospf area
add disabled=no instance=ospf1 name=backbone
/routing ospf interface-template
add area=backbone disabled=no interfaces=lo0,LAN,wg1 networks=\
    10.0.0.0/24,192.168.100.0/24,192.168.2.0/24
    
/ip firewall filter add action=accept chain=input protocol=ospf
Site 2
ip address
add address=192.168.5.125/24 interface=bridge network=192.168.5.0
add address=192.168.2.1/24 interface=wg1 network=192.168.2.0
add address=10.0.0.1/24 interface=lo0 network=10.0.0.0

/routing id
add id=10.0.0.1 name=id-1
/routing ospf instance
add disabled=no name=ospf1
/routing ospf area
add disabled=no instance=ospf1 name=backbone
/routing ospf interface-template
add area=backbone disabled=no interfaces=lo0,LAN,wg1 networks=\
    192.168.5.0/24,10.0.0.0/24,192.168.2.0/24
/ip firewall filter add action=accept chain=input protocol=ospf
Networks
Site 1 lan is 192.168.100.0/24 (2 more lans in the future)
Site 2 lan is 192.168.5.0/24 (2 more lans in the future)
Wireguard is 192.168.2.0/24 (more rad warrior clients in the future)

I can Ping both routers wg1 ip address over wireguard.
/routing Ospf neighbours prints show no data
/ip route print shows no routes learned through Ospf.

I suppose that I might have missed some basic points…

Any suggestion will be very appreciated

Thanks

Giuliano
 
wiseroute
Member
Member
Posts: 352
Joined: Sun Feb 05, 2023 11:06 am

Re: Ros7 Ospf over wire guard, no neighbours

Sat Jul 22, 2023 4:43 pm

hello,

ospf neighbor discovery using multicast address 224.0.0.0 - you should allow that address to flow inside the wg tunnels.

or...

you can specify ospf interface as ptp with unicast static neighbors.

so... there are a lot of subnets to pass the wg tunnels : ospf itself and the rest of the network.

other than that - check your firewall config.


hope this helps.
 
User avatar
spippan
Member
Member
Posts: 334
Joined: Wed Nov 12, 2014 1:00 pm
Location: Austria

Re: Ros7 Ospf over wire guard, no neighbours

Sat Aug 05, 2023 3:17 pm

hello,

ospf neighbor discovery using multicast address 224.0.0.0 - you should allow that address to flow inside the wg tunnels.

or...

you can specify ospf interface as ptp with unicast static neighbors.

so... there are a lot of subnets to pass the wg tunnels : ospf itself and the rest of the network.

other than that - check your firewall config.


hope this helps.
-> 224.0.0.5

Who is online

Users browsing this forum: No registered users and 4 guests