<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Hi Theera,<br>
<br>
We're using Mikrotik extensively as well, in combination with BIRD2.<br>
<br>
In RouterOS 7 there's been quite some work done on OSPF
specifically. The latest release 7.7 (see
<a class="moz-txt-link-freetext" href="https://mikrotik.com/download/changelogs/stable">https://mikrotik.com/download/changelogs/stable</a>) incorporates some
fixes for yet another bugs in this context.<br>
<br>
Apart from BIRD configuration, I would suggest to upgrade to
RouterOS 7.6 at least or even better 7.7.<br>
<br>
Cheers,<br>
Kees<br>
<br>
<div class="moz-cite-prefix">On 13-01-2023 18:11, Theera
Kittichareonpot wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DM4PR18MB4368D0E7609BBBB0B0BE6DD2DBC29@DM4PR18MB4368.namprd18.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css" style="display:none;">P {margin-top:0;margin-bottom:0;}</style>
<div class="elementToProof"><span style="font-family: Calibri,
Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);
background-color: rgb(255, 255, 255);" class="elementToProof">Hello,</span></div>
<div class="elementToProof"><span style="font-family: Calibri,
Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);
background-color: rgb(255, 255, 255);" class="elementToProof"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Calibri,
Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);
background-color: rgb(255, 255, 255);" class="elementToProof
ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3
ContentPasted4 ContentPasted5">I am very new to Bird so I
could be doing something wrong. But it seems Bird 2.0.11 could
have compatibility issues with Mikrotik routers when
OSPF authentication is used. <br>
<br>
When simple authentication is used, the neighbor state stays
at Init and doesn't change at all.<br>
<br>
When cryptographic password is used, the Mikrotik router gave
errors about wrong SA/SP id: "ospf-instance-1 { version: 2
router-id: 192.168.120.1 } ospf-area-1 { 0.0.0.0 } interface {
instance-id: 5 broadcast 192.168.10.1%br-lan } authentication
failed from 192.168.10.197 wrong SA ID". I've tried md5 sha256
and sha512, but all gave the same error.<br>
<br>
</span></div>
<div class="elementToProof"><span style="font-family: Calibri,
Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);
background-color: rgb(255, 255, 255);" class="elementToProof
ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3
ContentPasted4 ContentPasted5">Kindly let me know if I did
something wrong or what additional info is needed. <span
id="" title="" class="">
Thank you.</span><br>
</span></div>
<div class="elementToProof"><span style="font-family: Calibri,
Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);
background-color: rgb(255, 255, 255);" class="elementToProof
ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3
ContentPasted4 ContentPasted5"><br>
The following is my bird.conf:<br>
<br>
log syslog all;
<div class="ContentPasted5">#debug protocols all;</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">#router id 192.168.10.197;</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">ipv4 table master4;</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">protocol device {</div>
<div class="ContentPasted5">}</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">protocol direct direct4 {</div>
<div class="ContentPasted5"> ipv4; # Connect to default
IPv4 table</div>
<div class="ContentPasted5">}</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">protocol kernel kernel4 {</div>
<div class="ContentPasted5"> ipv4 {</div>
<div class="ContentPasted5"> import all;</div>
<div class="ContentPasted5"> export all;</div>
<div class="ContentPasted5"> };</div>
<div class="ContentPasted5">}</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">protocol static static4 {</div>
<div class="ContentPasted5"> ipv4;</div>
<div class="ContentPasted5">}</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5">protocol ospf v2 ospf4 {</div>
<div class="ContentPasted5"> instance id 5; # set to the
same as other routers'</div>
<div class="ContentPasted5"> ipv4 {</div>
<div class="ContentPasted5"> import all;</div>
<div class="ContentPasted5"> export all;</div>
<div class="ContentPasted5"> };</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5 elementToProof"> area 0 {</div>
<div class="ContentPasted5"> interface "eth0" {</div>
<div class="ContentPasted5"> type broadcast;</div>
<div class="ContentPasted5"> hello 10; # same
as other routers'</div>
<div class="ContentPasted5"> retransmit 5;</div>
<div class="ContentPasted5"> transmit delay
1;</div>
<div class="ContentPasted5 elementToProof"> dead
40;</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5"> #simple
authentication doesn't work with Mikrotik either. The state
stays at Init and doesn't change at all.</div>
<div class="ContentPasted5"> #authentication
simple;</div>
<div class="ContentPasted5"> #password
"12345678";</div>
<div><br class="ContentPasted5">
</div>
<div class="ContentPasted5"> # cryptographic
password doesn't seem to work with mikrotik too; got errors
about wrong SA/SP id</div>
<div class="ContentPasted5"> #authentication
cryptographic;</div>
<div class="ContentPasted5"> #password
"12345678" { algorithm hmac sha512; };</div>
<div class="ContentPasted5"> };</div>
<div class="ContentPasted5"> };</div>
<div class="ContentPasted5">}</div>
<br>
</span></div>
<div class="elementToProof">
<div style="font-family: Calibri, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div id="Signature">
<div>
<div id="divtagdefaultwrapper" style="font-size: 12pt;
color: rgb(0, 0, 0); font-family: Calibri, Arial,
Helvetica, sans-serif;">
<p>Theera K.</p>
<p><br>
</p>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>