From owner-freebsd-isp  Mon Mar 29 11: 8:11 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from blackhelicopters.org (unknown [209.69.178.18])
	by hub.freebsd.org (Postfix) with ESMTP id 4B43914DE5
	for <freebsd-isp@freebsd.org>; Mon, 29 Mar 1999 11:08:08 -0800 (PST)
	(envelope-from dispatch@blackhelicopters.org)
Received: (from dispatch@localhost)
	by blackhelicopters.org (8.8.8/8.8.8) id OAA16136;
	Mon, 29 Mar 1999 14:07:48 -0500 (EST)
	(envelope-from dispatch)
From: Dispatcher <dispatch@blackhelicopters.org>
Message-Id: <199903291907.OAA16136@blackhelicopters.org>
Subject: talking gated ospf to a cisco
To: freebsd-isp@freebsd.org
Date: Mon, 29 Mar 1999 14:07:48 -0500 (EST)
Cc: gated-people@gated.org
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hello,

You people seem like the most appropriate audience for this one, so:

I'm trying to make a firewall talk OSPF to a cisco router via gated.
Gated starts fine, but the neighbor never comes up.  There are two
routers outside the firewall; one is the default gateway, the other is
a private link to a distant part of the Net.

I'd appreciate any help pinpointing the problem.

We're running gated version 3.5.10.

A gdc dump shows:

<miscellaneous crud deleted for brevity>

Task OSPF:
        RouterID: <firewall external IP>
        Preference:     Inter/Intra: 10 External: 150
        Default:        Metric: 1       Tag: 0 Path: (0) 0 EGP  Type: 2
        SPF count: 1
        LSAs originated: 4      received: 0
                Router: 4
        Syslog first 16, then every 256
        Monitor authentication: none

        Packets Received:
               0: Monitor request                         0: Hello
               0: DB Description                           0: Link-State Req
               0: Link-State Update                           0: Link-State Ack

        Packets Sent:
               0: Monitor response                             9: Hello
               0: DB Description                             0: Link-State Req
               0: Link-State Update                          0: Link-State Ack

[lots of error headings listed, all 0, deleted for brevity]

       Area 0.0.0.0:
                Authtype: none  flags: <>
                SPF scheduled: <>

                Interface: <outside router IP> (ed0)
                        Cost: 1 State: DR               Type: NBMA
                        Priority: 1
                        Designated Router: <local interface IP>
                        Authentication: none
                        Timers:
                                Hello: 30  Poll: 2:00  Dead: 40  Retrans: 5
                        Neighbors:
                    RouterID: Unknown           Address: <external router IP>
                                State: Down     Mode: None      Priority: 1
                                DR: None        BDR: None
                                Last Hello: 13:35:21    Last Exchange: 13:35:21

Although the dump shows no packets received, a tcpdump on the machine in question shows quite a few OSPF packets from the other machine, i.e.:

14:03:06.456058 <outside router IP> > OSPF-ALL.MCAST.NET: OSPFv2-hello 44: 
backbone [|] [tos 0xc0] [ttl 1]

Our gated.conf reads:

routerid <outside interface IP> ;

rip no;

ospf yes {

        backbone {
                authtype none ;

        interface ed0 nonbroadcast cost 1 {
                enable;
                priority 1;
                retransmitinterval 5;
                hellointerval 30;
                routers {
                        <external router IP> eligible ;
                        } ;
                };
        };
};

static {
        default gateway <ext. gateway IP> interface ed0 preference 3 retain;
       192.168.0.0 mask 255.255.0.0 gateway 192.168.134.1 interface xl0 retain;
};

I can provide any other debugging info that might be helpful.

Thanks!

==ml





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message