04-25-2006 01:09 PM - edited 03-03-2019 12:31 PM
I have a T1 frame-relay connection to the internet on one router. On a second router, I have an HDLC T1 connection to the the internet. I form a ipsec protected tunnel between the two sites. When the tunnel comes up, and OSPF performs its adjacency, I start to get a tonne of 'adjacency fixup' messages, and my router cpu goes high. Any ideas as to why I get the messages? I have to 'shut' the tunnel to stop the messages.
interface Serial0/0/0:0
no ip address
encapsulation frame-relay IETF
load-interval 30
frame-relay lmi-type ansi
max-reserved-bandwidth 100
!
interface Serial0/0/0:0.1 point-to-point
ip address x.x.x.x 255.255.255.252
ip access-group aclBlockInbound in
ip access-group aclBlockOutbound out
no ip redirects
no ip unreachables
no ip proxy-arp
no cdp enable
frame-relay interface-dlci 16 IETF
interface Tunnel11
bandwidth 1024
ip address 172.20.x.x 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 xxxxx
ip ospf mtu-ignore
load-interval 30
qos pre-classify
keepalive 10 3
tunnel source Serial0/0/0:0.1
tunnel destination 64.x.x.x
tunnel mode ipsec ipv4
tunnel protection ipsec profile profForTun10
max-reserved-bandwidth 100
service-policy output pmShapeTun11
!
04-25-2006 02:15 PM
Hi,
Are you running CEF in that box?
Sundar
04-25-2006 04:31 PM
Yes, CEF is running on a 2821 with 12.4.7.
I did a 'clear ip ospf process' and the problem appears to have disappeared. I'm not sure if it will re-appear. I had been fooling with the bandwidth parameters on the tunnel (the bandwidth on the serial interface had been upgraded). Now that I have those configured, will it remain stable?
04-26-2006 07:04 AM
Ray
To be able to answer that question we would need to have a little more information. In particular if you could post the OSPF configuration and the output of show ip ospf interface would be helpful.
Without knowing many details of what you are running I would make my first guess that the issue you were running into may have been a recursive routing issue with the tunnel. Recursive routing is a likely issue especially if the same dynamic routing protocol advertises the subnet of the tunnel address and announces the subnet of the tunnel destination.
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide