S9700 opaque errors导致OSPF邻居关系震荡
问题描述
组网如图所示,S9700与C厂商路由器建立OSPF邻居,每几小时邻居关系震荡一次,S9700上获取日志如下:
NeighborRouterId=x.x.x.x, NeighborAreaId=0, NeighborInterface=Vlanif6,NeighborDownImmediate reason=Neighbor Down Due to 1-Wayhello Received, NeighborDownPrimeReason=1-Wayhello Received)
NeighborRouterId=x.x.x.x, NeighborAreaId=0, NeighborInterface=Vlanif6,NeighborDownImmediate reason=Neighbor Down Due to 1-Wayhello Received, NeighborDownPrimeReason=1-Wayhello Received)
告警信息
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[504]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[505]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=ExchangeDone, NeighborPreviousState=Exchange, NeighborCurrentState=Loading)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[506]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=NegotiationDone, NeighborPreviousState=ExStart, NeighborCurrentState=Exchange)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[507]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=2WayReceived, NeighborPreviousState=Init, NeighborCurrentState=ExStart)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[508]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=1-Way, NeighborPreviousState=Full, NeighborCurrentState=Init)
S9700-CSS %%01OSPF/3/NBR_DOWN_REASON(l)[509]:Neighbor state leaves full or changed to Down. (ProcessId=10, NeighborRouterId=v, NeighborAreaId=0, NeighborInterface=Vlanif6,NeighborDownImmediate reason=Neighbor Down Due to 1-Wayhello Received, NeighborDownPrimeReason=1-Wayhello Received)
处理过程
1.在S9700上查看ospf error信息,显示有大量opaque errors
======================================================
===============display ospf error===============
======================================================
OSPF Process 10 with Router ID x.x.x.x
OSPF error statistics
Opaque errors:
0 : 9-out of flooding scope 466 : 10-out of flooding scope
0 : 11-out of flooding scope 0 : Unkown TLV type
2.Opaque LSA 是OSPF的扩展属性,Type 9 LSA用于OSPF GR,Type 10 LSA用于OSPF TE.
3.检查对端设备配置,发现其OSPF进程下配置了MPLS TE,将会通告类型10的LSA
!
router ospf 10
router-id x.x.x.x
log-adjacency-changes
......
mpls traffic-eng router-id GigabitEthernetX/X
mpls traffic-eng area 0
!
根因
当C厂商发送Type 10的LSA,S9700上由于不兼容而未应答,导致C厂商关闭OSPF邻居
解决方案
在S9700上使能Opaque LSA功能
<HUAWEI> system-view
[HUAWEI] ospf
[HUAWEI-ospf-10] opaque-capability enable
建议与总结
1.当OSPF尽量关系down,请留意OSPF error
2.当与友商对接,请注意兼容性
3.如果需要在华为设备上支持类型9或10的LSA,请先使能opaque-capability
云服务器爆款直降90%
新客首单¥68起 | 人人可享99元套餐,续费同价 | u2a指定配置低至2.5折1年,立即选购享更多福利!