Hello list,

I have a question regarding the use of ospf with OpenBSD 6.8.

I have a network that consists of 23 OpenBSD 6.8 based routers (created, within 
a virtualbox environment on a GNU/Linux server, to match the physical network I 
manage - the only different being that the physical network consists of FreeBSD 
based routers rather than OpenBSD ones). I set this up after have replaced a 
FreeBSD based router with an OpenBSD based one in the real network and 
immediately experiencing an issue accessing parts of the network.

Within my setup there is one router (router22) that is six hops away from the 
designated default gateway (which I'll call the firewall) and there are two 
paths (going different ways around the network) to get to it. I am able to run 
a traceroute to router22, but am not able to ping it or ssh onto it. If I ssh 
to the router connected to the firewall then I can ping and ssh to router22 (at 
that point it's only 5 hops away). If I reboot any router that lies within the 
path to router22 then I am subsequently able to ping and ssh router22 from the 
firewall.

I have also subsequently duplicated the entire network again using FreeBSD 12.2 
and the problem does not occur, so as far as I can see it's just an OpenBSD 
ospf issue.

I first set this up after replacing a FreeBSD based router with an OpenBSD 
based one and experiencing another strange issue. In this instance the shortest 
path from my server network (accessible from router01) to router08, router11 
and router12 was router01 <-> router13 <-> router21 <-> router08 <-> router11 
<-> router12, when I put the OpenBSD router in as router13 I could no longer 
ping router08, router11 or router12 (though I could still ping router21). If I 
connected to a router in a different part of the network I was able to ping 
each of the inaccessible ones, so it was only when the OpenBSD based router was 
along the shortest path the issue manifested itself.

Is anyone aware of incompatibilities between the OSPF implementation within 
OpenBSD and that provided by quagga on FreeBSD? Or of any limitations of OSPF 
on OpenBSD?

In each setup I have the same hello and dead interval and have md5 crypt 
authentication in place on each link between routers. Each router is in area 
0.0.0.0.

regards,
Mark

Reply via email to