OSPF Process ID

dppagcdppagc Member Posts: 293
Hi,

Are there instances where they are more than 1 process id on the same ospf router?
If so, why will someone do that?

Comments

  • EdTheLadEdTheLad Member Posts: 2,111 ■■■■□□□□□□
    Yes, when you want to isolate two routing domains, rather than using vrf's.
    Networking, sometimes i love it, mostly i hate it.Its all about the $$$$
  • dppagcdppagc Member Posts: 293
    So there are 2 ways of doing the same thing?

    But I thought vrf is necessary at PE routers to distinguish between customer routes?
  • pevangelpevangel Member Posts: 342
    With VRFs, the tables are separate inside a single router. When you have two OSPF processes, the two processes will have separate databases but all routes will be in the same routing table.
  • james43026james43026 Member Posts: 303 ■■□□□□□□□□
    As pevangel has said, you could have 10 instances of OSPF running on a router, and they would all populate the global routing table, all with a separate OSPF database. While using VRF's for the same thing would yield 10 different route tables, that would appear to be physically separate from eachother.

    And yes VRF is used by service providers in their network for layer 3 VPNs, usually with either a MPLS backbone, or a MP-BGP backbone connecting said PE routers together. VRF isn't used for layer 2 VPNs though.
  • dppagcdppagc Member Posts: 293
    Ok I understand the concept of VRF but it doesnt answer the original question.
    Why should someone create more than 1 instance of an OSPF process if they populate the same routing table?

    What is the command to show that they are in separate databases?
  • EdTheLadEdTheLad Member Posts: 2,111 ■■■■□□□□□□
    "show ip ospf database" will show the two process databases
    "show ip ospf 1 database" or "show ip ospf 2 database"

    As an example, within an organization security department want to utilize the core infrastructure i.e. routers but use there own cards. You can create infrastructure links separate on each router which are utilized only by the security department. 2 ospf processes are configured, one for regular core and 1 for security. All security routes are isolated, no redistribution, no vrf required, no security issue with vrf leak. Shared RIB, but no default route, complete isolation on the same physical router without relying on software vrf.
    Networking, sometimes i love it, mostly i hate it.Its all about the $$$$
  • dppagcdppagc Member Posts: 293
    Hi,

    do you want elaborating on the sentence "use their own cards" ?
  • EdTheLadEdTheLad Member Posts: 2,111 ■■■■□□□□□□
    Typically core routers are modular, i.e. have pluggable modules i.e. NCS, CRS, ASR, 7600, 6500
    Networking, sometimes i love it, mostly i hate it.Its all about the $$$$
Sign In or Register to comment.