Community discussions

MikroTik App
  4. RouterOS
  5. Forwarding Protocols

OSPF error

Post Reply
 
eduardosilva
just joined
Topic Author
Posts: 24
Joined: Tue Dec 13, 2011 11:33 pm

OSPF error

Fri Apr 24, 2015 8:48 pm

Greetings,

I configured 4 routers using the same OSPF configuration.
router1 - 192.168.10.254
router2 - 192.168.10.225
router3 - 192.168.10.245
router4 - another network on router1
router3 was working fine, until I made a firmware upgrade on the routerboard.
Yesterday, I made another upgrade on all routers to version 6.28, but the problem on this routerboard was still there.
Code: Select all
Apr 24 14:33:45 mkt-router1 Discarding packet: wrong authentication type
Apr 24 14:33:45 mkt-router1     mine=cryptographic authentication
Apr 24 14:33:45 mkt-router1     message=null authentication
Apr 24 14:33:45 mkt-router1     source=192.168.10.245
Apr 24 14:33:45 mkt-router2 Discarding packet: wrong authentication type
Apr 24 14:33:45 mkt-router2     mine=cryptographic authentication
Apr 24 14:33:45 mkt-router2     message=null authentication
Apr 24 14:33:45 mkt-router2     source=192.168.10.245
Apr 24 14:33:46 mkt-router1 OSPFv2 neighbor 192.168.10.245: state change from ExStart to Init
Apr 24 14:33:46 mkt-router2 OSPFv2 neighbor 192.168.10.245: state change from Full to Init
Apr 24 14:33:54 mkt-router1 Ignoring Link State Acknowledgment packet: wrong peer state
Apr 24 14:33:54 mkt-router1     state=ExStart
Apr 24 14:34:04 mkt-router3 Ignoring Link State Acknowledgment packet: wrong peer state
Apr 24 14:34:04 mkt-router3     state=ExStart
Apr 24 14:34:33 mkt-router1 OSPFv2 neighbor 192.168.10.245: state change from ExStart to 2-Way
Apr 24 14:34:33 mkt-router3 OSPFv2 neighbor 192.168.10.254: state change from ExStart to 2-Way
Apr 24 14:35:13 mkt-router1 OSPFv2 neighbor 192.168.10.245: state change from ExStart to 2-Way
Apr 24 14:35:13 mkt-router3 OSPFv2 neighbor 192.168.10.254: state change from ExStart to 2-Way
Apr 24 14:35:53 mkt-router1 OSPFv2 neighbor 192.168.10.245: state change from ExStart to 2-Way
Apr 24 14:35:53 mkt-router3 OSPFv2 neighbor 192.168.10.254: state change from ExStart to 2-Way
Apr 24 14:36:33 mkt-router1 OSPFv2 neighbor 192.168.10.245: state change from ExStart to 2-Way
Apr 24 14:36:33 mkt-router3 OSPFv2 neighbor 192.168.10.254: state change from ExStart to 2-Way
Apr 24 14:37:13 mkt-router1 OSPFv2 neighbor 192.168.10.245: state change from ExStart to 2-Way
Apr 24 14:37:13 mkt-router3 OSPFv2 neighbor 192.168.10.254: state change from ExStart to 2-Way
Any ideas?
Thank you!
Top
 
User avatar
StubArea51
Trainer
Trainer
Posts: 1742
Joined: Fri Aug 10, 2012 6:46 am
Location: stubarea51.net
Contact:
Contact StubArea51

Re: OSPF error

Sat Apr 25, 2015 5:30 pm

If you haven't made any other changes other than a code upgrade then you may be looking at a bug.

Two things I would try to stabilize it are:

1) Turn off authentication, if enabled and ensure the settings match on each side
2) Going from EXSTART to 2-WAY back and forth can be a sign of MTU mismatch. Verify that L3 MTU values are the same for the subnet you are forming the adjacency on.
Top
 
eduardosilva
just joined
Topic Author
Posts: 24
Joined: Tue Dec 13, 2011 11:33 pm

Re: OSPF error

Sat Apr 25, 2015 6:02 pm

Hello, I already removed the ospf configuration of the 4 routers and reconfigured from scratch. Same issue.
Now I followed your suggestion and tested without authentication, but the issue stills there.

A bit unrelated: I tested with RIPv2 between the 4 routers and it is working as expected.

The interface MTU are the default values on all routers: MTU 1500 / L2 MTU 1598. I'm not using any tunnel or vlan configuration.

Thank you
Top
 
User avatar
StubArea51
Trainer
Trainer
Posts: 1742
Joined: Fri Aug 10, 2012 6:46 am
Location: stubarea51.net
Contact:
Contact StubArea51

Re: OSPF error

Sun Apr 26, 2015 12:10 am

Have you tried rolling back to 6.27 with the exact same config?
Top
 
eduardosilva
just joined
Topic Author
Posts: 24
Joined: Tue Dec 13, 2011 11:33 pm

Re: OSPF error

Sun Apr 26, 2015 1:05 am

I don't really remember what versions I was using, but let's say that:

I was running version 6.14 and configured ospf. Working without any issues.
Then I upgraded the 4 routers to version 6.22 and ospf broke on router3.

After a while, I tried to upgrade to version 6.24 or 26 just to check if the problem was fixed without any success.

Yesterday, I upgraded all the routers to version 6.28 just as a new try and reconfigured from scratch. removed all the rules from ospf and started again (all routers). Same issue

Just wondering, on my log messages, I can see:
Code: Select all
Apr 24 14:33:45 mkt-router2 Discarding packet: wrong authentication type
Apr 24 14:33:45 mkt-router2     mine=cryptographic authentication
Apr 24 14:33:45 mkt-router2     message=null authentication
Apr 24 14:33:45 mkt-router2     source=192.168.10.245
Is the router failling to send the correct authentication?


---------

Since RIPv2 worked without any issues, I guess that I will just leave ospf for now and downgrade to RIP :P
ospf really sounds nice, but my installation is quite small, I'm mostly using dynamic routing because I'm lazy lol.

A bit offtopic: I know that for RIPv2 you can sniff the network to grab the md5 key and them craft some rip packets and inject routes on the routers. Does ospf suffers from the same problem? For what I can see on routeros, their authentication method is almost the same.
I know that ospf is way fancier than ripv2, but in terms of security? are they the same?

Thank you.
Top
 
User avatar
StubArea51
Trainer
Trainer
Posts: 1742
Joined: Fri Aug 10, 2012 6:46 am
Location: stubarea51.net
Contact:
Contact StubArea51

Re: OSPF error

Sun Apr 26, 2015 6:19 pm

Can you post your ospf config for each of the routers?

Assuming there are no config issues, I would go back to somewhere around 6.19. This has been a very stable code for most of the routing protocols.
Top
 
Abdock
Member Candidate
Member Candidate
Posts: 261
Joined: Sun Sep 25, 2005 10:50 pm

Re: OSPF error

Fri May 01, 2015 1:01 pm

I have ospf working on 6.27, the new 6.28 broke everything for me. Rolling back is good if its working.
Top
 
User avatar
amt
Long time Member
Long time Member
Posts: 529
Joined: Fri Jan 16, 2015 2:05 pm

Re: OSPF error

Fri May 08, 2015 1:00 pm

I have ospf working on 6.27, the new 6.28 broke everything for me. Rolling back is good if its working.
Hi,

what happen when you upgrade to 6.28 ?
Top
 
Abdock
Member Candidate
Member Candidate
Posts: 261
Joined: Sun Sep 25, 2005 10:50 pm

Re: OSPF error

Fri May 08, 2015 3:18 pm

initially all went well with upgrading, after like 24 hrs, we had issues with a router, and restarting it we lost connection, this did not work till we restarted another one and it was like that for most of the time and eventually most of our links were down, the only way to bring them back were to restart manually with power on off, so we started downgrading one by one and everything is stable as it was before till now.
Top
 
Sykotic
just joined
Posts: 9
Joined: Mon Oct 06, 2014 2:15 am

Re: OSPF error

Tue May 12, 2015 4:14 am

Just noticed this thread. I can confirm something is wrong with OSPF or some protocol in v6.28.

http://forum.mikrotik.com/viewtopic.php?f=14&t=96705
Top
Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests
  4. RouterOS
  5. Forwarding Protocols