OSPF stub area and vrf's

[gnijs]

hello all,

I have a very strange problem with an OSPF stub area configured in a seperate vrf.

All interfaces are configured in the same area 1.1.3.20, and still the router thinks it is an ABR and generates a summary (because it is configured as stub area)

#sh ip ospf

Routing Process "ospf 3000" with ID 10.106.48.1
   Domain ID type 0x0005, value 0.0.11.184
Start time: 00:01:29.179, Time elapsed: 00:19:03.266
Supports only single TOS(TOS0) routes
Supports opaque LSA
Supports Link-local Signaling (LLS)
Supports area transit capability
Connected to MPLS VPN Superbackbone, VRF ZZZ (in vrf ZZZ)
It is an area border router (??? doh, no,it is not, not in this VRF and not in the default vrf also)
Router is not originating router-LSAs with maximum metric
Initial SPF schedule delay 10 msecs
Minimum hold time between two consecutive SPFs 100 msecs
Maximum wait time between two consecutive SPFs 5000 msecs
Incremental-SPF enabled
Initial LSA throttle delay 10 msecs
Minimum hold time for LSA throttle 100 msecs
Maximum wait time for LSA throttle 5000 msecs
Minimum LSA arrival 80 msecs
LSA group pacing timer 240 secs
Interface flood pacing timer 33 msecs
Retransmission pacing timer 66 msecs
Number of external LSA 0. Checksum Sum 0x000000
Number of opaque AS LSA 0. Checksum Sum 0x000000
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 1. 0 normal 1 stub 0 nssa
Number of areas transit capable is 0
External flood list length 0
IETF NSF helper support enabled
Cisco NSF helper support enabled
Reference bandwidth unit is 100 mbps
    Area 1.1.3.20 (-> you see, only one area configured !)
        Number of interfaces in this area is 3 (1 loopback)
       It is a stub area (yes, true)
          generates stub default route with cost 10 (no, why ? this is not an ABR !)
        Area has no authentication
        SPF algorithm last executed 00:17:28.810 ago
        SPF algorithm executed 12 times
        Area ranges are
        Number of LSA 9. Checksum Sum 0x03C499
        Number of opaque link LSA 0. Checksum Sum 0x000000
        Number of DCbitless LSA 0
        Number of indication LSA 0
        Number of DoNotAge LSA 0
        Flood list length 0

running software 12.2(44)SE6   on WS-C3750G-24TS-1U

regards,

Geert

[gnijs]

router ospf 3000 vrf ZZZ
router-id 10.106.48.1
ispf
log-adjacency-changes
area 1.1.3.20 stub
area 1.1.3.20 default-cost 10
timers throttle spf 10 100 5000
timers throttle lsa all 10 100 5000
timers lsa arrival 80
passive-interface default
no passive-interface Vlan2030
no passive-interface Vlan2300
network 10.106.48.0 0.0.0.255 area 1.1.3.20
!
router ospf 1000
router-id 10.102.82.1
ispf
log-adjacency-changes
area 1.1.2.20 authentication message-digest
area 1.1.2.20 stub
timers throttle spf 10 100 5000
timers throttle lsa all 10 100 5000
timers lsa arrival 80
passive-interface default
no passive-interface Vlan30
no passive-interface Vlan300
network 10.102.82.8 0.0.0.7 area 1.1.2.20
network 10.102.82.0 0.0.0.255 area 1.1.2.20
network 10.104.247.0 0.0.0.127 area 1.1.2.20

[gnijs]

ok, the problem is this:

http://www.cisco.com/en/US/docs/ios/12_0st/12_0st21/feature/guide/ospfvrfl.html

You must configure "capability vrf-lite" to decouple the VRF OSPF from the MPLS VPN superbackbone (??)

[Mohamed Sobair]

Hi,

You should provide more information in order to get better response. without better knowing your design/Scenario, then people might not be able to address your inquiry.

The (Capability vrf-lite) allows OSPF to disable the (Down-bit) check on the LSA Header, the Down-bit is checked by default when there is BGP redistribution into OSPF. this mechanism prevents OSPF loops in MPLS-VPN.

its recommended to be disabled at the CE router where there is no interfaction between bgp and OSPF.

Good you have solved it out.

HTH

Mohamed

[gnijs]

ok, i was not running my switches in any BGP CE-PE scenario , just a local lan with multiple VRFs. I am not running BGP at all on my switches.

[Florin Barhala]

In this VRF do you also have AREA 0?