OSPF and VRRP issue

[mcarassale]

hi everyone,

i am having an issue after configured OSPF within our infrastructure.

i get an INIT state between on 4506 Cisco L3 switch and one Nokia IP330 firewall.

I believe is something to do with VRRP configured between the IP330s but i cannot figure out where the problem is.

Can anyine help? See attachment.

[chriswill]

try the link below to see if it points you in the right direction

http://www.cisco.com/warp/public/104/trouble_main.html#trouble_init_state

Chris Will

[vijayasankar]

Hi,

This is the due to fact that cisco router has OSPF LLS feature turned on by default

Other vendors implementation of OSPF might not support them. In your case the NOKIA firewall might not support OSPF LLS feature.

Hence you need to disable OSPF LLS feature on the cisco router, so that it can form neighbor relationship with nokia device.

You can disable the OSPF LLS(Link local signalling) feature per interface in the cisco router as follows

config t

interface

ip ospf lls disable"

Optionally Globally you can disable the LLS feature in the ospf by turning it off in the router ospf process.

Config t

router ospf process-id

no capability lls

Refer this url for more information.

http://cisco.com/en/US/products/sw/iosswrel/ps1829/products_feature_guide09186a00801eff18.html#wp1053383

Hope this helps. Please Rate the post if it was helpful.

-Vj

[vijayasankar]

Hi,

Do you still have this problem?

Kindly let us know whether you are facing this problem even after disabling lls.

-VJ

[mcarassale]

hi VJ,

thank you for your help.

yes the LLS disabling has resolved the issue.

But what i don't understand is why other Cisco devices had established connection even with LLS enabled and the problem was only with one Switch?

Thank you

[vijayasankar]

Hi,

Thanks for updating us. Glad that the issue is resolved.

Not sure. Kindly check the output of "show ip ospf interface " on the other cisco device and verify whether LLS is enabled on those interfaces.

The sample output of an interface in which lls is disabled will look like the one below.

Ethernet2/0 is up, line protocol is up

Internet Address 10.1.145.2/16, Area 1

Process ID 1, Router ID 10.22.222.2, Network Type BROADCAST, Cost: 10

Transmit Delay is 1 sec, State BDR, Priority 1

Designated Router (ID) 10.2.2.3, Interface address 10.1.145.1

Backup Designated router (ID) 10.22.222.2, Interface address 10.1.145.2

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

oob-resync timeout 40

Hello due in 00:00:04

! Does not support Link-local Signaling (LLS)

Index 2/2, flood queue length 0

Next 0x0(0)/0x0(0)

Last flood scan length is 2, maximum is 11

Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 1, Adjacent neighbor count is 1

Adjacent with neighbor 45.2.2.3 (Designated Router)

Suppress hello for 0 neighbor(s)

Hope this helps.

-VJ