Re: FWSM strange problem

From: nikolai (mr.nikolai@gmail.com)
Date: Wed Nov 15 2006 - 17:23:12 ART


Lora Ganeva wrote:
> Hi everyone,
>
>
>
> Since I am novice to this forum, please excuse my incompetence:-). I
> have FWSM in cat6k performing central role in my network.
>
> The FWSM is running OS 3.1.1. It has 4-5 OSFP NSSA in one ospf routing
> process and one normal ospf area in a second OSPF process.
> Redistribution from the first to the second routing process is done. The
> strange problem appears without any clue in the log file - routes that
> are in the OSPF database - more specifically OSPF IA disappear from the
> routing table. After clearing the ospf process they appear again. (The
> LSA are in the database all the time without expiring). Unfortunately
> this is very important device, because it performs routing between MPLS
> VRFs and any lost of routing information is a tragedy. The most dramatic
> situation was when the FWSM lost its default gateway - all the areas
> left without the default gateway and being NSSA this was near to lost of
> connectivity:-)
>
> I checked the Release notes, there is no such strange effect
> described:-) . This is not a lab, so reloading and upgrading/downgrading
> must be the last choice.
>
> Any help will be appreciated,
>
>
>
> Greetings,
>
> Lora
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
Lora,

A few questions/notes for you:

* Are you running native IOS, or Hybrid on your CAT6500s?
* Are you doing your L3 routing (OSPF, etc.) on the FWSM, and not on the
MSFC (or SUP720)? FYI, this is from Cisco: "FWSM can be set up as an
ABR; however, the ability to configure FWSM as an ASBR is limited to
default information only (for example, injecting a default route)".
* Where is your Backbone OSPF Area (0) - you must have it in order to
create an ABR that could potentially generate the Defaults for the NSSA
areas by configuring "nssa no-summary".
* How are you getting your Default Routes now?
* Are you running MPLS VPN, or just connecting to a PE (LSR) device,
which is a part of an ISP MPLS network?
* Finally, please look into OSPF Sham-Link Support for MPLS VPN - issue
with OSPF IA routes:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/ospfshmk.htm

Regards,

Nikolai Tsankov



This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:47 ART