Wrong default route announced with OSPF
Hi all, we have a strange issue with bird and OSPF: We have set up a two redundant firewall clusters, one for external and one for internal routing. The setup is working well, as long as only the active external firewall has bird running. If we start bird on the passive firewall, the wrong Gateway for 0.0.0.0/0 is announced: The passive firewall has no default route in the main table ( until it imports the one from its peer of course) _active firewall ( before and after starting bird on the passive fw)_ bird> show route all 0.0.0.0/0 via 178.19.71.1 on eth1 [kernel1 03:59:51] * (10) Type: inherit unicast univ Kernel.source: 3 Kernel.metric: 4 _internal firewall before the start if the second bird instance_ 0.0.0.0/0 via 10.11.0.1 on fwfwtrans [ppospf 17:39:36] * E2 (150/15/10000) [10.11.0.1] Type: OSPF-E2 unicast univ OSPF.metric1: 15 OSPF.metric2: 10000 OSPF.tag: 0x00000000 OSPF.router_id: 10.11.0.1 _internal firewall after the start if the second bird instance_ 0.0.0.0/0 via 10.11.0.2 on fwfwtrans [ppospf 17:38:03] * E2 (150/15/10000) [10.11.0.1] Type: OSPF-E2 unicast univ OSPF.metric1: 15 OSPF.metric2: 10000 OSPF.tag: 0x00000000 OSPF.router_id: 10.11.0.1 Any idea? -- Thomas Berger BundesIT Piratenpartei Deutschland – Pirate Party of Germany Pflugstraße 9a, D-10115 Berlin, Germany Patrick Schiffer (Vors.), Carsten Sawosch (Stellv. Vors.), Kristos Thingilouthis (Pol. GF), Lothar Krauß (Schatzm.), Thomas Knoblich (Stellv. GS), Alexander Niedermeier (Stellv pol. GF), Steffen Heuer (Stellv. Schatzm.)
On Sun, Feb 05, 2017 at 09:05:10PM +0100, Thomas Berger wrote:
Hi all,
we have a strange issue with bird and OSPF:
We have set up a two redundant firewall clusters, one for external and one for internal routing.
The setup is working well, as long as only the active external firewall has bird running. If we start bird on the passive firewall, the wrong Gateway for 0.0.0.0/0 is announced:
The passive firewall has no default route in the main table ( until it imports the one from its peer of course)
Hi I do not really understand your setting, could you describe more about network topology, what is your config files, the output of 'show ospf state' and how routes are expected to be propagated between protocols? -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."
participants (2)
-
Ondrej Zajicek -
Thomas Berger