cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7270
Views
5
Helpful
5
Replies

ip ospf mtu ignore explanation

Aleksey1985
Level 1
Level 1

Hello guys,

I have an issue with ospf neighborship - stuck in loading state, but if I apply ip ospf mtu-ignore command, state become full!

Can anyone explain me how command ip ospf mtu-ignore works? I think it helpful if mtu on interfaces mismatch and neighborship stuck in exstart.

Thanks.

5 Replies 5

daniel.dib
Level 7
Level 7

For an OSPF adjacency to form some parameters must match:

  • Belong to same IP network
  • Subnet mask
  • Area
  • Authentication
  • MTU
  • If area is stub/NSSA
  • Timers

So why is it a requirement for the MTU to match? Imagine that Router A has a MTU of 1500 bytes, Router B has a MTU of 9000 bytes. Depending on the number of links in the network it is possible that Router B would send router LSA or LSU that will exceed 1500 bytes.

From RFC 2328:

 If the Interface MTU field in the Database Description packet
        indicates an IP datagram size that is larger than the router can
        accept on the receiving interface without fragmentation, the
        Database Description packet is rejected.

If the MTU does not match the adjacency will not form. This OSPF provides a check for both data plane and control plane. By ensuring MTU is same the path will be able to be used by end hosts with a consistent MTU. Normally Path MTU Discovery (PMTUD) should be used for hosts to provide this check and avoid fragmentation but sometimes ICMP may be filtered.

From control plane perspective it keeps OSPF from breaking in such situations where a router would send larger LSA/LSU than the neighbor can accept. So if Router B sends LSA/LSU that is for example 3000 bytes. Then Router A can not accept this packet which means that synchronization can't occur. If you configure ip ospf mtu-ignore what happens is that OSPF ignores MTU as part of the state matchine checking if to form adjacency. The adjacency will then form but there may be other issues later. Many people believe that this is the solution but it may still be an issue when synchronizing the database.

The proper fix is to ensure that MTU is consistent between adjacent routers.

For more information see this link:

http://blog.ine.com/2011/03/30/ospf-and-mtu-mismatch/

Daniel Dib
CCIE #37149

Please rate helpful posts.

Daniel Dib
CCIE #37149
CCDE #20160011

Please rate helpful posts.

In my case mtu does match, ospf neighborship - stuck in loading state, but ip ospf mtu-ignore helps resolve this issue and neighborship become full. I can't understand why this command help me in my case?

Aleksey,

Daniel is absolutely correct - if the ip ospf mtu-ignore interface command helps then you do have an MTU problem.

I suggest verifying the IP MTU of the interfaces using the show ip interface command. Also, debug ip ospf adj is helpful. Watch for messages such as:

*Mar  1 00:02:29.151: OSPF: Rcv DBD from 10.255.255.2 on FastEthernet0/0 seq 0x1B4B opt 0x52 flag 0x7 len 32  mtu 1500 state EXSTART

*Mar  1 00:02:29.155: OSPF: Nbr 10.255.255.2 has larger interface MTU

or

*Mar  1 00:02:10.263: OSPF: Rcv DBD from 10.255.255.1 on FastEthernet0/1 seq 0xA6C opt 0x52 flag 0x7 len 32  mtu 1400 state EXSTART

*Mar  1 00:02:10.263: OSPF: Nbr 10.255.255.1 has smaller interface MTU

Notice the MTU indicated in the debug message: one router advertises an MTU of 1500 bytes, the other advertises MTU of 1400 bytes. OSPF will refuse to create a full adjacency to this router until either MTU mismatch is resolved, or the ip ospf mtu-ignore is used.

Best regards,

Peter

hi peter,

 

i'm running OSPF on top of IPSec/GRE tunnels between two sites.

 

my question is, do i add the "tunnel path-mtu-discovery" on both ends of the GRE tunnels?

 

what's the difference between "ip ospf mtu-ignore" and "tunnel path-mtu-discovery"? do i need to apply both or either one of the command should work?

 

interface Tunnel1

 ip ospf mtu-ignore
 tunnel path-mtu-discovery

 

Hi Aleksey,

It could be a bug; probably the MTU is configured the same between the routers but what is actually received in the packets could be different, try doing some debugs and taking packet captures to see if everything is alright.

If ospf is stuck in loading state it is highly likely because of some corrupted LSA.

-Vishesh