OSPF Adjacency

networker050184networker050184 Mod Posts: 11,962 Mod
in CCNP
Something interesting I came across today while browsing the web. We all know that for an OSPF neighbor relationship to form the subnet mask must match on each side of the link. What I came across today states that the subnet mask will be ignored on point-to-point links and virtual links. I decided to lab it up and it does work on point-to-point links with mismatching subnet masks. It is also referenced in RFC 2328

This section explains the detailed processing of a received
Hello Packet. (See Section A.3.2 for the format of Hello
packets.) The generic input processing of OSPF packets will
have checked the validity of the IP header and the OSPF packet
header. Next, the values of the Network Mask, HelloInterval,
and RouterDeadInterval fields in the received Hello packet must
be checked against the values configured for the receiving
interface. Any mismatch causes processing to stop and the
packet to be dropped. In other words, the above fields are
really describing the attached network's configuration. However,
there is one exception to the above rule: on point-to-point
networks and on virtual links, the Network Mask in the received
Hello Packet should be ignored.



I may have been the only one in the dark on this one, but I thought I'd share anyway :)
An expert is a man who has made all the mistakes which can be made.
· Share on FacebookShare on Twitter

Comments

  • jason_lundejason_lunde Member Posts: 567
    Wow, I did not know that! Thanks networker. I will have to lab that up as well to believe it, but it is interesting to know nonetheless.
    · Share on FacebookShare on Twitter
  • APAAPA Member Posts: 959
    Another handy bit of info ! :)
    CCNA | CCNA:Security | CCNP | CCIP
    JNCIA:JUNOS | JNCIA:EX | JNCIS:ENT | JNCIS:SEC
    JNCIS:SP | JNCIP:SP
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Too many Member Posts: 1,442 ■■■■□□□□□□
    If want to have a real blast with OSPF try something like a full mesh topology of 4 or 5 routers with un-numbered interfaces. If that isn't enough fun for you then proceed to do the same thing over something like frame relay. icon_lol.gif
    · Share on FacebookShare on Twitter
  • networker050184networker050184 Mod Posts: 11,962 Mod
    cisco_trooper wrote: »
    If want to have a real blast with OSPF try something like a full mesh topology of 4 or 5 routers with un-numbered interfaces. If that isn't enough fun for you then proceed to do the same thing over something like frame relay. icon_lol.gif


    I've worked a very large full mesh OSPF network that used unnumbered on all links. It was an environment that needed to adapt quickly to change with very little engineering changes when things moved. The best solution was to use unnumbered so IPs on links wouldn't have to be changed. You could use a simple template that could be applied to all interfaces no matter the site.

    The fun part was all the VPNs in there icon_wink.gif
    An expert is a man who has made all the mistakes which can be made.
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Too many Member Posts: 1,442 ■■■■□□□□□□
    networker050184 wrote: »
    I've worked a very large full mesh OSPF network that used unnumbered on all links. It was an environment that needed to adapt quickly to change with very little engineering changes when things moved. The best solution was to use unnumbered so IPs on links wouldn't have to be changed. You could use a simple template that could be applied to all interfaces no matter the site.

    The fun part was all the VPNs in there icon_wink.gif

    VPNs peered on un-numbered interfaces...??? You've trumped me. THAT has got to be interesting.

    I haven't done much with VPNs on routers, just security appliances such as the ASA or Netscreens......
    · Share on FacebookShare on Twitter
  • dtlokeedtlokee Member Posts: 2,378 ■■■■□□□□□□
    networker050184 wrote: »
    I've worked a very large full mesh OSPF network that used unnumbered on all links. It was an environment that needed to adapt quickly to change with very little engineering changes when things moved. The best solution was to use unnumbered so IPs on links wouldn't have to be changed. You could use a simple template that could be applied to all interfaces no matter the site.

    The fun part was all the VPNs in there icon_wink.gif


    I would think the engineering required to change IP addresses on some links would be far less than the work required to re-engineer the VPN tunnels.
    The only easy day was yesterday!
    · Share on FacebookShare on Twitter
  • networker050184networker050184 Mod Posts: 11,962 Mod
    dtlokee wrote: »
    I would think the engineering required to change IP addresses on some links would be far less than the work required to re-engineer the VPN tunnels.


    Yeah the tunnels were a bit more of a challenge, but they could be brought up after the links were put in so it wasn't as big of a deal trying to get them up without support. The problem was really the lack of knowledgeable people to support the infrastructure so it needed to be as plug and play as possible because links were always changing.
    An expert is a man who has made all the mistakes which can be made.
    · Share on FacebookShare on Twitter
Sign In or Register to comment.