I just implemented OSPF at our site and most everything has worked as expected, but I have a question regarding some issues I am having regarding the redistribute connected.
We have a back-bone network (VLAN13) that has four different routers connected to it. Two of these routers are WAN routers and two of these routers are LAN routers. The two LAN routers connect VLAN13 with an access network (VLAN540). These two LAN routers use HSRP to provide our workstations a highly available gateway.
OSPF is running on all routers and it all works as long as only one LAN router is connected to VLAN13. If both LAN routers are connected to VLAN13 we see a lot of packet loss between VLAN540 and VLAN13.
The OSPF configuration of the two LAN routers is as follows:
LAN ROUTER 1
LAN ROUTER 2
The LAN routers also connect to another network that connects them to the firewalls and they are our default route to the internet, hence the default-information originate command. VLAN13 is running network 10.4.2.0/24. (I just noticed the mask is off for this command, but I don’t believe it would cause the problems we are experiencing.
Below is some ASCI art to try and diagram our network setup
X = router
VLAN540
--------------
| |
X X LAN Routers
| |
X-----------------X WAN Routers
VLAN13
Any help or advice on how to troubleshoot or figure out why we have an issue when both LAN routers are connected to VLAN13 would really be awesome.
Thanks in advance.
Joe
---------------------------------------
Joe Keegan - Joe@jjk3.com
SANS GSEC & GCFW
CCSE, CCNA, CCSA & Sun Certified
We have a back-bone network (VLAN13) that has four different routers connected to it. Two of these routers are WAN routers and two of these routers are LAN routers. The two LAN routers connect VLAN13 with an access network (VLAN540). These two LAN routers use HSRP to provide our workstations a highly available gateway.
OSPF is running on all routers and it all works as long as only one LAN router is connected to VLAN13. If both LAN routers are connected to VLAN13 we see a lot of packet loss between VLAN540 and VLAN13.
The OSPF configuration of the two LAN routers is as follows:
LAN ROUTER 1
Code:
router ospf 1
log-adjacency-changes
area 0 authentication message-digest
redistribute connected metric-type 1 subnets
network 10.4.2.0 0.0.0.255 area 0
default-information originate metric 1000 metric-type 1
LAN ROUTER 2
Code:
router ospf 1
log-adjacency-changes
area 0 authentication message-digest
redistribute connected metric 10 metric-type 1 subnets
network 10.4.2.0 0.0.0.255 area 0
default-information originate metric 1010 metric-type 1
The LAN routers also connect to another network that connects them to the firewalls and they are our default route to the internet, hence the default-information originate command. VLAN13 is running network 10.4.2.0/24. (I just noticed the mask is off for this command, but I don’t believe it would cause the problems we are experiencing.
Below is some ASCI art to try and diagram our network setup
X = router
VLAN540
--------------
| |
X X LAN Routers
| |
X-----------------X WAN Routers
VLAN13
Any help or advice on how to troubleshoot or figure out why we have an issue when both LAN routers are connected to VLAN13 would really be awesome.
Thanks in advance.
Joe
---------------------------------------
Joe Keegan - Joe@jjk3.com
SANS GSEC & GCFW
CCSE, CCNA, CCSA & Sun Certified