S9700 opaque errors导致OSPF邻居关系震荡

发布时间:  2015-05-26 浏览次数:  975 下载次数:  0
问题描述


组网如图所示,S9700与C厂商路由器建立OSPF邻居,每几小时邻居关系震荡一次,S9700上采集日志如下:

NeighborRouterId=x.x.x.x, NeighborAreaId=0, NeighborInterface=Vlanif6,NeighborDownImmediate reason=Neighbor Down Due to 1-Wayhello Received, NeighborDownPrimeReason=1-Wayhello Received)
NeighborRouterId=x.x.x.x, NeighborAreaId=0, NeighborInterface=Vlanif6,NeighborDownImmediate reason=Neighbor Down Due to 1-Wayhello Received, NeighborDownPrimeReason=1-Wayhello Received)

告警信息

S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[504]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[505]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=ExchangeDone, NeighborPreviousState=Exchange, NeighborCurrentState=Loading)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[506]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=NegotiationDone, NeighborPreviousState=ExStart, NeighborCurrentState=Exchange)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[507]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=2WayReceived, NeighborPreviousState=Init, NeighborCurrentState=ExStart)
S9700-CSS %%01OSPF/4/NBR_CHANGE_E(l)[508]:Neighbor changes event: neighbor status changed. (ProcessId=10, NeighborAddress=x.x.x.x, NeighborEvent=1-Way, NeighborPreviousState=Full, NeighborCurrentState=Init)
S9700-CSS %%01OSPF/3/NBR_DOWN_REASON(l)[509]:Neighbor state leaves full or changed to Down. (ProcessId=10, NeighborRouterId=v, NeighborAreaId=0, NeighborInterface=Vlanif6,NeighborDownImmediate reason=Neighbor Down Due to 1-Wayhello Received, NeighborDownPrimeReason=1-Wayhello Received

处理过程

1.在S9700上查看ospf error信息,显示有大量opaque errors

======================================================
  ===============display ospf error===============
======================================================

         OSPF Process 10 with Router ID x.x.x.x

                 OSPF error statistics

Opaque errors:
0     : 9-out of flooding scope        466   : 10-out of flooding scope
0     : 11-out of flooding scope       0     : Unkown TLV type

2.Opaque LSA 是OSPF的扩展属性,Type 9 LSA用于OSPF GR,Type 10 LSA用于OSPF TE.

3.检查对端设备配置,发现其OSPF进程下配置了MPLS TE,将会通告类型10的LSA

!
router ospf 10
router-id x.x.x.x
log-adjacency-changes
......

mpls traffic-eng router-id GigabitEthernetX/X

mpls traffic-eng area 0

!

根因

当C厂商发送Type 10的LSA,S9700上由于不兼容而未应答,导致C厂商关闭OSPF邻居

解决方案

在S9700上使能Opaque LSA功能

<HUAWEI> system-view

[HUAWEI] ospf

[HUAWEI-ospf-10] opaque-capability enable

建议与总结

1.当OSPF尽量关系down,请留意OSPF error

2.当与友商对接,请注意兼容性

3.如果需要在华为设备上支持类型9或10的LSA,请先使能opaque-capability

END