I’ve got some MLXe’s talking to ASR’s with ospf/ospfv3. I do seem to have a hard coded MTU in there but can’t remember why. On the brocade side, ve interface:
ip mtu 1500 ip ospf area 0 ip ospf md5-authentication key-id 111 key 1 yyyyyyy ipv6 mtu 1500 ipv6 ospf area 0 ipv6 ospf authentication ipsec spi 222 esp sha1 encryptb64 xxxxxxx And on the cisco side vlan interface: ip ospf authentication message-digest ip ospf message-digest-key 111 md5 7 yyyyyyy ip ospf 65535 area 0 ipv6 ospf authentication null ipv6 ospf 65535 area 0 ipv6 ospf encryption ipsec spi 222 esp null sha1 7 xxxxxx From: foundry-nsp <[email protected]<mailto:[email protected]>> on behalf of "Howard, Christopher" <[email protected]<mailto:[email protected]>> Date: Monday, March 21, 2016 at 8:40 PM To: foundry-nsp <[email protected]<mailto:[email protected]>> Subject: [f-nsp] IPv6 OSPFv3 Brocade to Cisco I’m having trouble getting OSPFv3 up between a Brocade ICX7750 and a Cisco 4500X. I’ve found on cisco-nsp where someone else found a working config using the following: Brocade side: ipv6 ospf authentication ipsec spi #### esp sha1 KEY Cisco side: ipv6 ospf authentication null ipv6 ospf encryption ipsec spi #### esp null sha1 KEY Well, I’m already doing OSPFv3 between Brocades using the exact line in the example, which is good. I also have OSPFv3 neighbors up with our firewall (not Cisco). However, when I use the Cisco side of the example I don’t get a successful neighbor. On the Brocade side, I see a neighbor in the neighbor table, but it’s stuck in INIT state. On the Cisco side, the neighbor table is empty. Normally when it’s stuck in INIT state, I’d check MTU sizes and general connectivity between both sides. Both are 1500 bytes and both sides can ping each other. Does any one have any ideas as to what I can look at next, or if they have a working config that’s different from mine? I can’t remove the authentication without having to clear that out of my network everywhere. -Christopher
_______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
