ISR4351 - No OSPF hello packets going out of interface, no ping to 224.0.0.5

[Goosyara]

Hi,
I have a Cisco ISR4351 and I'm trying to set up OSPF on it, and I'm running into a problem with getting it working. I've created an OSPF process as area 0 and linked it to one of VLAN interfaces:

router ospf 1
 router-id xx.xx.xx.17
 log-adjacency-changes detail
 network xx.xx.xx.16 0.0.0.15 area 0
!

There are no ACL's configured on VLAN interface or it's parent:

interface GigabitEthernet0/0/0
 no ip address
 no ip redirects
 no ip proxy-arp
 ip policy route-map POL_ROUTE
 media-type rj45
 negotiation auto
!
interface GigabitEthernet0/0/0.11
 description OSPF_Interface
 encapsulation dot1Q 11
 ip address xx.xx.xx.17 255.255.255.240
 ip policy route-map POL_ROUTE
!

Enabling debugging of OSPF hello packets shows that the hello packet is being sent out of the interface:

OSPF-1 HELLO Gi0/0/0.11: Send hello to 224.0.0.5 area 0 from xx.xx.xx.17

Other OSPF neighbors are visible, but at their side there are no any OSPF packets from xx.xx.xx.17:

GW1#sh ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface
xx.xx.xx.21    1   INIT/DROTHER    00:00:34    xx.xx.xx.21  GigabitEthernet0/0/0.11
xx.xx.xx.23    1   INIT/DROTHER    00:00:39    xx.xx.xx.23  GigabitEthernet0/0/0.11
xx.xx.xx.24    1   INIT/DROTHER    00:00:34    xx.xx.xx.24  GigabitEthernet0/0/0.11
xx.xx.xx.30    1   INIT/DROTHER    00:00:39    xx.xx.xx.30  GigabitEthernet0/0/0.11

Direct ping to each of other routers is working, but there is no ping to 224.0.0.5. Also there are no OSPF packets visible at Wireshark box connected directly to GigabitEthernet0/0/0.

OSPF traffic on interface GigabitEthernet0/0/0.11:

OSPF packets received/sent

  Type          Packets              Bytes
  RX Invalid    0                    0
  RX Hello      20167                1129352
  RX DB des     0                    0
  RX LS req     0                    0
  RX LS upd     1295                 99516
  RX LS ack     3589                 186896
  RX Total      25051                1415764

  TX Failed     0                    0
  TX Hello      5320                 425512
  TX DB des     0                    0
  TX LS req     0                    0
  TX LS upd     0                    0
  TX LS ack     0                    0
  TX Total      5320                 425512

OSPF header errors
  Length 0, Instance ID 0, Checksum 0, Auth Type 0,
  Version 0, Bad Source 0, No Virtual Link 0,
  Area Mismatch 0, No Sham Link 0, Self Originated 0,
  Duplicate ID 0, Hello 0, MTU Mismatch 0,
  Nbr Ignored 0, LLS 0, Unknown Neighbor 0,
  Authentication 0, TTL Check Fail 0, Adjacency Throttle 0,
  BFD 0, Test discard 0

OSPF LSA errors
  Type 0, Length 0, Data 0, Checksum 0

Software version: Cisco IOS XE 16.06.04. Any help would be greatly appreciated.

[Giuseppe Larosa]

Hello @Goosyara ,

I would like to ask the following questions:

a)  are the other routers connected to Vlan 11 able to see each other in OSPF and have them reached the FULL state with DR and BDR whoever they are ?

b) what the route-map POL_ROUTE is supposed to do. Can you try without it applied to gi0/0/0 and gi0/0/0.11 ?

The local router is stucked in INIT state because it does not see its own OSPF RID listed in received hellos from neighbors.

Hope to help

Giuseppe

[Goosyara]

Thanks for replying!

a) All routers connected to vlan11 are working without any problems in FULL mode. Even older Cisco 2951 works well with the same OSPF/Interface config. Quagga OSPFd on my PC also works well being connected to vlan trunk port (to which GigabitEthernet0/0/0 is connected to).

b) Route-map POL_ROUTE is created for ISP failover. Removing of POL_ROUTE gives no effect.

As I noticed previously, the same OSPF config on Cisco 2951 works well. The most significant difference in configuration files between 2951 and 4351 is the presence of management interface GigabitEthernet0 and its VRF. The GigabitEthernet0 is used for ssh connections only.

May the Mgmt-intf VRF (that being added by default) harm OSPF multicast?

[Giuseppe Larosa]

Hello @Goosyara ,

>>

The most significant difference in configuration files between 2951 and 4351 is the presence of management interface GigabitEthernet0 and its VRF. The GigabitEthernet0 is used for ssh connections only.

>> May the Mgmt-intf VRF (that being added by default) harm OSPF multicast?

It shouldn't be a problem as this approach is used in all modern routers and switches. Of course you cannot use that gi0 to route user traffic or to run OSPF over it,  but you are using a different interface gi0/0/0 ?

Give a try to another ge interface on the router. Also you can try to use a SPAN session to verify if the router is sending out OSPF hellos with destination 224.0.0.5 or not ( I mean making a packet capture with wireshark with a PC connected to the destination port of the SPAN session or simply by connecting the PC directly to the router interface).

Hope to help

Giuseppe