SR6608---SR664
两边通过多条子接口互联
运营商线路中断ospf,线路恢复后SR6604连接SR6608其中一个子接口ospf邻居状态异常,查看bfd状态无法建立,把bfd配置取消掉ospf邻居依旧无法建立,重启SR6604的ospf进程,ospf邻居恢复full状态。
本端先收到另外一个子接口21.231.248.137发过来的HELLO包,因此选择先与其建立ospf邻居。
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Source address: 21.231.248.137
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Destination address: 224.0.0.5
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Version 2, Type: 1, Length: 48.
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Router: 21.224.127.14, Area: 0.0.0.81, Checksum: 20253.
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Authentication type: 00, Key(ASCII): 0 0 0 0 0 0 0 0.
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Network mask: 255.255.255.252, Hello interval: 10, Option: _N/P_
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Router priority: 1, Dead Interval: 40, DR: 0.0.0.0, BDR: 0.0.0.0.
*Mar 1 05:52:52:461 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Neighbor ID: 21.231.251.90.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; OSPF 300: Sending packets.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Source address: 21.231.250.30
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Destination address: 224.0.0.5
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Version 2, Type: 1, Length: 48.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Router: 21.231.251.42, Area: 0.0.0.81, Checksum: 20301.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Authentication type: 00, Key(ASCII): 0 0 0 0 0 0 0 0.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Network mask: 255.255.255.252, Hello interval: 10, Option: _N/P_.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Router priority: 1, Dead Interval: 40, DR: 0.0.0.0, BDR: 0.0.0.0.
*Mar 1 05:52:53:803 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Neighbor ID: 21.224.127.14.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; OSPF 300: Receiving packets.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Source address: 21.231.250.29
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Destination address: 224.0.0.5
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Version 2, Type: 1, Length: 48.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Router: 21.224.127.14, Area: 0.0.0.81, Checksum: 20301.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Authentication type: 00, Key(ASCII): 0 0 0 0 0 0 0 0.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Network mask: 255.255.255.252, Hello interval: 10, Option: _N/P_.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Router priority: 1, Dead Interval: 40, DR: 0.0.0.0, BDR: 0.0.0.0.
*Mar 1 05:52:54:460 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1; Neighbor ID: 21.231.251.42.
6608侧:
OSPF Process 300 with Router ID 21.224.127.14
Neighbor Brief Information
Area: 0.0.0.81
Router ID Address Pri Dead-Time State Interface
21.231.251.42 21.231.250.30 1 34 ExStart/ - GE3/1/7.1600
6604侧:
OSPF Process 300 with Router ID 21.231.251.42
Neighbor Brief Information
Area: 0.0.0.81
Router ID Address Pri Dead-Time State Interface
21.224.127.14 21.231.248.137 1 32 Init/ - GE2/0/0
此问题是由于SR6604收到了SR6608 g3/1/7的子接口下的多个HELLO组播报文。正常的直连p2p链路,我们只会收到各自对应接口的报文, 根本原因是由于SR6608发的HELLO包到达传输设备后,传输将所有的报文无差别转发了(报文过中间传输或者交换机都会出现此问题)。
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.153.
*Mar 1 05:35:03:395 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1;
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.193.
*Mar 1 05:35:03:396 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1;
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.169.
*Mar 1 05:35:03:396 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1;
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.157.
*Mar 1 05:35:03:398 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1;
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.21.
*Mar 1 05:35:03:399 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1;
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.185.
*Mar 1 05:35:03:400 2022 jiningshifenhang-shengchan OSPF/7/DEBUG: -MDC=1;
OSPF: Recv packet from unknown non-shamlink/vlink nbr 21.231.248.181.
由上面可知:因为是ospf p2p配置,不检查网段,只跟其相连的建立邻居, SR6604收到SR6608这边多个网段的ospf hello组播报文,先收到谁就以谁来建邻居了。两端都配置peer-address-check 进行网段检查,即可规避由中间交换网或者传输导致的此类问题。(接口ospf网络类型默认为broadcast的话是可以正常建立的)。
ospf network-type p2p [ peer-address-check ]
peer-address-check :配置建立邻接关系必须在同一网段的检查功能,即在接收Hello报文时,对端的IP地址与当前接口必须在同一网段。
dis ospf peer
OSPF Process 300 with Router ID 21.231.251.42
Neighbor Brief Information
Area: 0.0.0.81
Router ID Address Pri Dead-Time State Interface
21.224.127.14 21.231.248.137 1 32 Init/ - GE2/0/0
===============display ospf statistics error===============
OSPF Process 300 with Router ID 21.231.251.42
OSPF Packet Error Statistics
0 : Router ID confusion 0 : Bad packet
0 : Bad version 0 : Bad checksum
3798 : Bad area ID 0 : Drop on unnumbered link
0 : Bad virtual link 0 : Bad authentication type
0 : Bad authentication key 0 : Packet too small
98 : Neighbor state low 0 : Transmit error
0 : Interface down 2919 : Unknown neighbor
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作