USD ($)
$
United States Dollar
India Rupee

Implementing OSPF Over Ethernet Segments

Lesson 2/37 | Study Time: 30 Min
Implementing OSPF Over Ethernet Segments

Tasks


Note: You must perform Lab0 for loading the initial configurations before starting this lab.

● Configure OSPF using process ID of 1 on R6, R7, and R9 as follows:

 ✓ Use only interface-level commands on R9.

 ✓ Do not use any interface-level commands on R6 and R7.

 ✓ Use area 67 between R6 and R7, and area 79 between R7 and R9.

 ✓ Advertise Loopback0 prefixes of R6 in area 67 and Loopback0 of R9 in area 79.

● On R6, enable OSPF only for interfaces with the exact IP addresses of 170.1.6.6 and 177.1.67.6.

● On R7, enable OSPF on all interfaces within the subnets 177.1.67.0/24 and 177.1.79.0/24.

● Ensure that R7 has IP connectivity with R6's and R9's Loopback0 prefixes.


Configurations


R6:

enable
!
configure terminal
!
router ospf 1
 network 177.1.67.6 0.0.0.0 area 67
 network 170.1.6.6 0.0.0.0 area 67
!
end
!
write
!


R7:

enable
!
configure terminal
!
router ospf 1
 network 177.1.67.0 0.0.0.255 area 67
 network 177.1.79.0 0.0.0.255 area 79
!
end
!
write
!


R9:

enable
!
configure terminal
!
interface GigabitEthernet0/0
 ip ospf 1 area 79
!
interface Loopback0
 ip ospf 1 area 79
!
end
!
write
!


Verifications

This task illustrates two different ways to enable the OSPF process. These include the legacy network statement under the OSPF process and the interface-level command ip ospf [process-id] area [area-id]. Both accomplish the same thing with one minor exception. If an interface is IP unnumbered, and there is a network statement that matches the IP address of the primary interface, both the primary interface and the unnumbered interface will have OSPF enabled on them in the designated area. Additionally, when enabled at the interface level, by default OSPF will inject both primary and secondary subnets of the interface in the OSPF database and advertise it to its neighbors. If you want to suppress the secondary prefixes, use the ip ospf [process-id] area [area-id] secondaries none command. 

The network statement in OSPF, just like the network statement under the EIGRP process, is not used to originate a network advertisement. Instead it simply enables the OSPF process on the interface. If multiple network statements overlap the same interface, the most specific match based on the wildcard mask wins.

R6 enables the OSPF area 67 only on the interface with the exact IP address of 177.1.67.6 with the command network 177.1.67.6 0.0.0.0 area 67 , which does not mean, however, that the network 177.1.67.6/32 itself will be advertised. Instead, OSPF will read the prefix from the interface configuration and bring the 177.1.67.0/24 subnet in the OSPF database.

Likewise on R7, the network 177.1.67.0 0.0.0.255 area 67 command means that OSPF area 67 will be enabled on any interface within the 177.1.67.0/24 subnet. It is just a coincidence that the network command actually also matches the prefix-length/subnet-mask.

Regardless of whether the network statement or the ip ospf statement are used, the result can be verified with the show ip ospf interface brief command. Note that in the output below, there is no functional difference seen between R6 and R9, which had OSPF enabled differently.


R6#show ip ospf interface brief

Interface    PID   Area            IP Address/Mask    Cost  State Nbrs F/C

Lo0             1        67              170.1.6.6/32             1       LOOP         0/0

Gi0/1          1        67              177.1.67.6/24           1       DR             1/1


R9#show ip ospf interface brief

Interface    PID   Area            IP Address/Mask    Cost  State Nbrs F/C

Lo0          1     79              170.1.9.9/32       1     LOOP  0/0

Gi0/0        1     79              177.1.79.9/24      1     DR    1/1


There is, however, a detailed output that identifies how OSPF was enabled for that interface, with or without the network command.


R6#show ip ospf interface gigabitEthernet0/1

GigabitEthernet0/1 is up, line protocol is up 

  Internet Address 177.1.67.6/24, Area 67, Attached via Network Statement

  Process ID 1, Router ID 170.1.6.6, Network Type BROADCAST, Cost: 1

  Topology-MTID    Cost    Disabled    Shutdown      Topology Name

        0           1         no          no            Base

  Transmit Delay is 1 sec, State DR, Priority 1

  Designated Router (ID) 170.1.6.6, Interface address 177.1.67.6

  Backup Designated router (ID) 177.1.7.7, Interface address 177.1.67.7

  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

    oob-resync timeout 40

    Hello due in 00:00:08

  Supports Link-local Signaling (LLS)

  Cisco NSF helper support enabled

  IETF NSF helper support enabled

  Index 1/1/1, flood queue length 0

  Next 0x0(0)/0x0(0)/0x0(0)

  Last flood scan length is 0, maximum is 1

  Last flood scan time is 0 msec, maximum is 0 msec

  Neighbor Count is 1, Adjacent neighbor count is 1 

    Adjacent with neighbor 177.1.7.7  (Backup Designated Router)

  Suppress hello for 0 neighbor(s)


R9#show ip ospf interface gigabitEthernet0/0

GigabitEthernet0/0 is up, line protocol is up 

  Internet Address 177.1.79.9/24, Area 79, Attached via Interface Enable

  Process ID 1, Router ID 177.1.9.9, Network Type BROADCAST, Cost: 1

  Topology-MTID    Cost    Disabled    Shutdown      Topology Name

        0           1         no          no            Base

  Enabled by interface config, including secondary ip addresses

  Transmit Delay is 1 sec, State DR, Priority 1

  Designated Router (ID) 177.1.9.9, Interface address 177.1.79.9

  Backup Designated router (ID) 177.1.7.7, Interface address 177.1.79.7

  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

    oob-resync timeout 40

    Hello due in 00:00:05

  Supports Link-local Signaling (LLS)

  Cisco NSF helper support enabled

  IETF NSF helper support enabled

  Index 1/1/1, flood queue length 0

  Next 0x0(0)/0x0(0)/0x0(0)

  Last flood scan length is 1, maximum is 2

  Last flood scan time is 0 msec, maximum is 0 msec

  Neighbor Count is 1, Adjacent neighbor count is 1 

    Adjacent with neighbor 177.1.7.7  (Backup Designated Router)

  Suppress hello for 0 neighbor(s)


After verifying that the interfaces are configured in the correct areas, the next verification is to check the adjacency state of the OSPF neighbors with the show ip ospf neighbor command. To form an OSPF adjacency, some attributes must match between neighbors, while others must be unique. The common attributes that must match are the area number, timers, authentication, stub flags, MTU, and compatible network types. The attributes that must be unique are the interface IP addresses and the router-ids.

The router-id is a 32-bit number and is chosen first based on the process-level router-id command, second based on the highest active Loopback IP interface, and last based on the highest active non-Loopback interface IP address. Because the LSA origination is based on the router-id, each router needs a unique OSPF router-id within the OSPF domain; otherwise OSPF database collisions occur and the SPF tree cannot be properly calculated. Moreover, two routers with the same router-id cannot become neighbors, for the same exact reason; basically the router is saying, I can't become neighbor with myself.

Verify that R7 is OSPF neighbor with both R6 and R9, and reached a functional neighbor state. For this case, where there are only two neighbors on the broadcast segment, a functional state means the FULL state.


R6#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface

177.1.7.7         1   FULL/BDR        00:00:35    177.1.67.7      GigabitEthernet0/1


R7#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface

170.1.6.6         1   FULL/DR         00:00:33    177.1.67.6      GigabitEthernet0/1

177.1.9.9         1   FULL/DR         00:00:36    177.1.79.9      GigabitEthernet0/2


R9#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface

177.1.7.7         1   FULL/BDR        00:00:31    177.1.79.7      GigabitEthernet0/0


Although adjacencies have been established, a fundamental underlying design issue still exists in the network. At this point, only areas 67 and 79 are configured. 

The backbone area 0 is not configured on any links. This implies that the devices can route within their own area (Intra-Area), but not between areas (Inter-Area). This is because the Area Border Router (ABR) that connects one area to area zero is responsible for generating the Network Summary LSA (LSA 3) that describes the inter-area routes.

The result of this can be seen by viewing both the OSPF database table and the routing tables of the routers. Because R7 is attached to both areas, it has router LSAs from both areas, whereas R6 and R9 only from the areas being attached to.


R6#show ip ospf database 

 OSPF Router with ID (170.1.6.6) (Process ID 1)

Router Link States (Area 67)


Link ID         ADV Router      Age         Seq#       Checksum Link count

170.1.6.6       170.1.6.6       717         0x80000004 0x008B74 2

177.1.7.7       177.1.7.7       708         0x80000003 0x00981E 1

Net Link States (Area 67)

Link ID         ADV Router      Age         Seq#       Checksum

177.1.67.6      170.1.6.6       717         0x80000001 0x00A865


R7#show ip ospf database 

OSPF Router with ID (177.1.7.7) (Process ID 1)

Router Link States (Area 67)

Link ID         ADV Router      Age         Seq#       Checksum Link count

170.1.6.6       170.1.6.6       739         0x80000004 0x008B74 2

177.1.7.7       177.1.7.7       728         0x80000003 0x00981E 1

Net Link States (Area 67)

Link ID         ADV Router      Age         Seq#       Checksum

177.1.67.6      170.1.6.6       739         0x80000001 0x00A865

Router Link States (Area 79)

Link ID         ADV Router      Age         Seq#       Checksum Link count

177.1.7.7       177.1.7.7       674         0x80000004 0x00BDDC 1

177.1.9.9       177.1.9.9       520         0x80000004 0x007E43 2

Net Link States (Area 79)

Link ID         ADV Router      Age         Seq#       Checksum

177.1.79.9      177.1.9.9       683         0x80000001 0x000ADA


R9#show ip ospf database 

            OSPF Router with ID (177.1.9.9) (Process ID 1)

Router Link States (Area 79)

Link ID         ADV Router      Age         Seq#       Checksum Link count

177.1.7.7       177.1.7.7       702         0x80000004 0x00BDDC 1

177.1.9.9       177.1.9.9       545         0x80000004 0x007E43 2

Net Link States (Area 79)

Link ID         ADV Router      Age         Seq#       Checksum

177.1.79.9      177.1.9.9       708         0x80000001 0x000ADA



Because R7 is not configured as ABR to perform LSA1 to LSA3 translation, R6 and R9 actually learn no routes through OSPF, as R7 does not advertise any prefixes in area 67 or area 79 other than the directly connected Ethernet link with R6 and R9.


R6#show ip route ospf

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       a - application route

       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set


R6#

R9#show ip route ospf

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       a - application route

       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set


R9#

R7#show ip route ospf

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       a - application route

       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set

      170.1.0.0/32 is subnetted, 3 subnets

O        170.1.6.6 [110/2] via 177.1.67.6, 00:15:01, GigabitEthernet0/1

O        170.1.9.9 [110/2] via 177.1.79.9, 00:14:02, GigabitEthernet0/2


Verify that R7 has IP connectivity with R6's and R9's Loopback0 prefixes.


R7#ping 170.1.6.6

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 170.1.6.6, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms


R7#ping 170.1.9.9  

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 170.1.9.9, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

Deepak Sharma

Deepak Sharma

Product Designer
★★★★★ 4.89
Faithful User
Expert Vendor
Golden Classes
King Seller
Fantastic Support
Loyal Writer

Class Sessions

1- Load Initial Configurations and Verifications 2- Implementing OSPF Over Ethernet Segments 3- Implementing OSPF Over DMVPN Network 4- Implementing DR BDR Election Process 5- Load Basic OSPF Routing Configurations 6- Implement OSPF Network Type of Point-to-Point. 7- Implementing an OSPF Network Type of Point-to-Multipoint 8- Implementing OSPF Network Type of Point-to-Multipoint Non-Broadcast 9- Implementing Loopback in OSPF Network 10- Implement Auto Cost Path Selection in OSPF 11- Implement Path Selection with No Cost in OSPF 12- OSPF Path Selection with Bandwidth 13- Implementing OSPF Path Selection with Per-Neighbor Cost 14- Implementing Discontiguous OSPF Areas with Virtual Links 15- Implementing Path Selection with Non Backbone Transit Area 16- Implementing Path Selection with Virtual Links 17- Implementing Demand Circuit 18- Implement Flooding Reduction 19- Implement Clear Text Authentication 20- Implement MD5 Authentication 21- Implement OSPF Null Authentication 22- Implement MD5 Authentication with Multiple Keys 23- Implement Internal Summarization in OSPF 24- Implement Path Selection with Summarization 25- Implement OSPF External Summarization 26- Implement Stub Areas 27- Implement Totally Stubby Areas 28- Implement Not-So-Stubby Areas 29- Implement Not-So-Stubby Areas and Default Routing 30- Implement Not-So-Totally Stubby Areas 31- Implement Stub Points with Multiple Exit Points 32- Implement OSPF NSSA Type-7 to Type-5 Translator Election 33- Implement NSSA Redistribution Filtering 34- Implement LSA Type-3 Filtering 35- OSPF Default Routing 36- Implement Conditional Default Routing 37- Implement Reliable Conditional Default Routing