blob: bd53a69248db6187c53534141a3b231b08d02056 [file] [log] [blame]
Paul Jakmaf912cb42006-07-27 23:30:16 +00001@cindex OSPFv2
paul76b89b42004-11-06 17:13:09 +00002@node OSPFv2
paul718e3742002-12-13 20:15:29 +00003@chapter OSPFv2
4
paule5b308d2005-10-29 20:19:49 +00005@acronym{OSPF,Open Shortest Path First} version 2 is a routing protocol
6which is described in @cite{RFC2328, OSPF Version 2}. OSPF is an
Paul Jakmaf912cb42006-07-27 23:30:16 +00007@acronym{IGP,Interior Gateway Protocol}. Compared with @acronym{RIP},
paule5b308d2005-10-29 20:19:49 +00008@acronym{OSPF} can provide scalable network support and faster
9convergence times. OSPF is widely used in large networks such as
10@acronym{ISP,Internet Service Provider} backbone and enterprise
11networks.
paul718e3742002-12-13 20:15:29 +000012
13@menu
14* Configuring ospfd::
15* OSPF router::
16* OSPF area::
17* OSPF interface::
18* Redistribute routes to OSPF::
19* Showing OSPF information::
20* Debugging OSPF::
paule5b308d2005-10-29 20:19:49 +000021* OSPF Configuration Examples::
paul718e3742002-12-13 20:15:29 +000022@end menu
23
paul76b89b42004-11-06 17:13:09 +000024@node Configuring ospfd
paul718e3742002-12-13 20:15:29 +000025@section Configuring ospfd
26
paule5b308d2005-10-29 20:19:49 +000027There are no @command{ospfd} specific options. Common options can be
paul718e3742002-12-13 20:15:29 +000028specified (@pxref{Common Invocation Options}) to @command{ospfd}.
paule5b308d2005-10-29 20:19:49 +000029@command{ospfd} needs to acquire interface information from
30@command{zebra} in order to function. Therefore @command{zebra} must be
31running before invoking @command{ospfd}. Also, if @command{zebra} is
32restarted then @command{ospfd} must be too.
paul718e3742002-12-13 20:15:29 +000033
paule5b308d2005-10-29 20:19:49 +000034Like other daemons, @command{ospfd} configuration is done in @acronym{OSPF}
paul718e3742002-12-13 20:15:29 +000035specific configuration file @file{ospfd.conf}.
36
paul76b89b42004-11-06 17:13:09 +000037@node OSPF router
paul718e3742002-12-13 20:15:29 +000038@section OSPF router
39
40To start OSPF process you have to specify the OSPF router. As of this
41writing, @command{ospfd} does not support multiple OSPF processes.
42
43@deffn Command {router ospf} {}
44@deffnx Command {no router ospf} {}
45Enable or disable the OSPF process. @command{ospfd} does not yet
46support multiple OSPF processes. So you can not specify an OSPF process
47number.
48@end deffn
49
50@deffn {OSPF Command} {ospf router-id @var{a.b.c.d}} {}
51@deffnx {OSPF Command} {no ospf router-id} {}
Paul Jakmac3eab602006-07-28 04:42:39 +000052@anchor{ospf router-id}This sets the router-ID of the OSPF process. The
53router-ID may be an IP address of the router, but need not be - it can
54be any arbitrary 32bit number. However it MUST be unique within the
55entire OSPF domain to the OSPF speaker - bad things will happen if
56multiple OSPF speakers are configured with the same router-ID! If one
57is not specified then @command{ospfd} will obtain a router-ID
58automatically from @command{zebra}.
paul718e3742002-12-13 20:15:29 +000059@end deffn
60
61@deffn {OSPF Command} {ospf abr-type @var{type}} {}
62@deffnx {OSPF Command} {no ospf abr-type @var{type}} {}
Paul Jakmaf912cb42006-07-27 23:30:16 +000063@var{type} can be cisco|ibm|shortcut|standard. The "Cisco" and "IBM" types
64are equivalent.
65
66The OSPF standard for ABR behaviour does not allow an ABR to consider
67routes through non-backbone areas when its links to the backbone are
68down, even when there are other ABRs in attached non-backbone areas
69which still can reach the backbone - this restriction exists primarily
70to ensure routing-loops are avoided.
71
72With the "Cisco" or "IBM" ABR type, the default in this release of
73Quagga, this restriction is lifted, allowing an ABR to consider
74summaries learnt from other ABRs through non-backbone areas, and hence
75route via non-backbone areas as a last resort when, and only when,
76backbone links are down.
77
78Note that areas with fully-adjacent virtual-links are considered to be
79"transit capable" and can always be used to route backbone traffic, and
80hence are unaffected by this setting (@pxref{OSPF virtual-link}).
paule5b308d2005-10-29 20:19:49 +000081
pauld4f50312003-01-22 19:26:00 +000082More information regarding the behaviour controlled by this command can
paule5b308d2005-10-29 20:19:49 +000083be found in @cite{RFC 3509, Alternative Implementations of OSPF Area
84Border Routers}, and @cite{draft-ietf-ospf-shortcut-abr-02.txt}.
85
86Quote: "Though the definition of the @acronym{ABR,Area Border Router}
pauld4f50312003-01-22 19:26:00 +000087in the OSPF specification does not require a router with multiple
88attached areas to have a backbone connection, it is actually
89necessary to provide successful routing to the inter-area and
90external destinations. If this requirement is not met, all traffic
91destined for the areas not connected to such an ABR or out of the
92OSPF domain, is dropped. This document describes alternative ABR
93behaviors implemented in Cisco and IBM routers."
paul718e3742002-12-13 20:15:29 +000094@end deffn
95
96@deffn {OSPF Command} {ospf rfc1583compatibility} {}
97@deffnx {OSPF Command} {no ospf rfc1583compatibility} {}
Paul Jakmaf912cb42006-07-27 23:30:16 +000098@cite{RFC2328}, the sucessor to @cite{RFC1583}, suggests according
paule5b308d2005-10-29 20:19:49 +000099to section G.2 (changes) in section 16.4 a change to the path
100preference algorithm that prevents possible routing loops that were
101possible in the old version of OSPFv2. More specifically it demands
102that inter-area paths and intra-area path are now of equal preference
103but still both preferred to external paths.
104
105This command should NOT be set normally.
paul718e3742002-12-13 20:15:29 +0000106@end deffn
107
Andrew J. Schorrd7e60dd2006-06-29 20:20:52 +0000108@deffn {OSPF Command} {log-adjacency-changes [detail]} {}
109@deffnx {OSPF Command} {no log-adjacency-changes [detail]} {}
110Configures ospfd to log changes in adjacency. With the optional
111detail argument, all changes in adjacency status are shown. Without detail,
112only changes to full or regressions are shown.
113@end deffn
114
Paul Jakmaf912cb42006-07-27 23:30:16 +0000115@deffn {OSPF Command} {passive-interface @var{interface}} {}
116@deffnx {OSPF Command} {no passive-interface @var{interface}} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000117@anchor{OSPF passive-interface} Do not speak OSPF interface on the
118given interface, but do advertise the interface as a stub link in the
119router-@acronym{LSA,Link State Advertisement} for this router. This
120allows one to advertise addresses on such connected interfaces without
121having to originate AS-External/Type-5 LSAs (which have global flooding
122scope) - as would occur if connected addresses were redistributed into
123OSPF (@pxref{Redistribute routes to OSPF})@. This is the only way to
124advertise non-OSPF links into stub areas.
paul718e3742002-12-13 20:15:29 +0000125@end deffn
126
paule5b308d2005-10-29 20:19:49 +0000127@deffn {OSPF Command} {timers throttle spf @var{delay} @var{initial-holdtime} @var{max-holdtime}} {}
128@deffnx {OSPF Command} {no timers throttle spf} {}
129This command sets the initial @var{delay}, the @var{initial-holdtime}
130and the @var{maximum-holdtime} between when SPF is calculated and the
131event which triggered the calculation. The times are specified in
132milliseconds and must be in the range of 0 to 600000 milliseconds.
133
134The @var{delay} specifies the minimum amount of time to delay SPF
135calculation (hence it affects how long SPF calculation is delayed after
136an event which occurs outside of the holdtime of any previous SPF
137calculation, and also serves as a minimum holdtime).
138
139Consecutive SPF calculations will always be seperated by at least
140'hold-time' milliseconds. The hold-time is adaptive and initially is
141set to the @var{initial-holdtime} configured with the above command.
142Events which occur within the holdtime of the previous SPF calculation
143will cause the holdtime to be increased by @var{initial-holdtime}, bounded
144by the @var{maximum-holdtime} configured with this command. If the adaptive
145hold-time elapses without any SPF-triggering event occuring then
146the current holdtime is reset to the @var{initial-holdtime}. The current
147holdtime can be viewed with @ref{show ip ospf}, where it is expressed as
148a multiplier of the @var{initial-holdtime}.
149
150@example
151@group
152router ospf
153 timers throttle spf 200 400 10000
154@end group
155@end example
156
157In this example, the @var{delay} is set to 200ms, the @var{initial
158holdtime} is set to 400ms and the @var{maximum holdtime} to 10s. Hence
159there will always be at least 200ms between an event which requires SPF
160calculation and the actual SPF calculation. Further consecutive SPF
161calculations will always be seperated by between 400ms to 10s, the
162hold-time increasing by 400ms each time an SPF-triggering event occurs
163within the hold-time of the previous SPF calculation.
164
165This command supercedes the @command{timers spf} command in previous Quagga
166releases.
paul718e3742002-12-13 20:15:29 +0000167@end deffn
168
paule5b308d2005-10-29 20:19:49 +0000169@deffn {OSPF Command} {max-metric router-lsa [on-startup|on-shutdown] <5-86400>} {}
170@deffnx {OSPF Command} {max-metric router-lsa administrative} {}
171@deffnx {OSPF Command} {no max-metric router-lsa [on-startup|on-shutdown|administrative]} {}
172This enables @cite{RFC3137, OSPF Stub Router Advertisement} support,
173where the OSPF process describes its transit links in its router-LSA as
174having infinite distance so that other routers will avoid calculating
175transit paths through the router while still being able to reach
176networks through the router.
177
178This support may be enabled administratively (and indefinitely) or
179conditionally. Conditional enabling of max-metric router-lsas can be
180for a period of seconds after startup and/or for a period of seconds
181prior to shutdown.
182
183Enabling this for a period after startup allows OSPF to converge fully
184first without affecting any existing routes used by other routers,
185while still allowing any connected stub links and/or redistributed
186routes to be reachable. Enabling this for a period of time in advance
187of shutdown allows the router to gracefully excuse itself from the OSPF
188domain.
189
190Enabling this feature administratively allows for administrative
191intervention for whatever reason, for an indefinite period of time.
192Note that if the configuration is written to file, this administrative
193form of the stub-router command will also be written to file. If
194@command{ospfd} is restarted later, the command will then take effect
195until manually deconfigured.
196
197Configured state of this feature as well as current status, such as the
198number of second remaining till on-startup or on-shutdown ends, can be
199viewed with the @ref{show ip ospf} command.
paul718e3742002-12-13 20:15:29 +0000200@end deffn
201
paule5b308d2005-10-29 20:19:49 +0000202@deffn {OSPF Command} {auto-cost reference-bandwidth <1-4294967>} {}
203@deffnx {OSPF Command} {no auto-cost reference-bandwidth} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000204@anchor{OSPF auto-cost reference-bandwidth}This sets the reference
205bandwidth for cost calculations, where this bandwidth is considered
206equivalent to an OSPF cost of 1, specified in Mbits/s. The default is
207100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will have a
208cost of 1. Cost of lower bandwidth links will be scaled with reference
209to this cost).
paule5b308d2005-10-29 20:19:49 +0000210
211This configuration setting MUST be consistent across all routers within the
212OSPF domain.
paul718e3742002-12-13 20:15:29 +0000213@end deffn
214
215@deffn {OSPF Command} {network @var{a.b.c.d/m} area @var{a.b.c.d}} {}
216@deffnx {OSPF Command} {network @var{a.b.c.d/m} area @var{<0-4294967295>}} {}
217@deffnx {OSPF Command} {no network @var{a.b.c.d/m} area @var{a.b.c.d}} {}
218@deffnx {OSPF Command} {no network @var{a.b.c.d/m} area @var{<0-4294967295>}} {}
hassoa5b2b592004-04-17 10:09:29 +0000219This command specifies the OSPF enabled interface(s). If the interface has
220an address from range 192.168.1.0/24 then the command below enables ospf
221on this interface so router can provide network information to the other
222ospf routers via this interface.
paule5b308d2005-10-29 20:19:49 +0000223
paul718e3742002-12-13 20:15:29 +0000224@example
225@group
226router ospf
hassoa5b2b592004-04-17 10:09:29 +0000227 network 192.168.1.0/24 area 0.0.0.0
paul718e3742002-12-13 20:15:29 +0000228@end group
229@end example
paule5b308d2005-10-29 20:19:49 +0000230
hassoa5b2b592004-04-17 10:09:29 +0000231Prefix length in interface must be equal or bigger (ie. smaller network) than
232prefix length in network statement. For example statement above doesn't enable
233ospf on interface with address 192.168.1.1/23, but it does on interface with
234address 192.168.1.129/25.
paul718e3742002-12-13 20:15:29 +0000235@end deffn
236
paul76b89b42004-11-06 17:13:09 +0000237@node OSPF area
paul718e3742002-12-13 20:15:29 +0000238@section OSPF area
239
240@deffn {OSPF Command} {area @var{a.b.c.d} range @var{a.b.c.d/m}} {}
241@deffnx {OSPF Command} {area <0-4294967295> range @var{a.b.c.d/m}} {}
242@deffnx {OSPF Command} {no area @var{a.b.c.d} range @var{a.b.c.d/m}} {}
243@deffnx {OSPF Command} {no area <0-4294967295> range @var{a.b.c.d/m}} {}
hasso63869f12004-04-19 14:43:46 +0000244Summarize intra area paths from specified area into one Type-3 summary-LSA
245announced to other areas. This command can be used only in ABR and ONLY
246router-LSAs (Type-1) and network-LSAs (Type-2) (ie. LSAs with scope area) can
247be summarized. Type-5 AS-external-LSAs can't be summarized - their scope is AS.
248Summarizing Type-7 AS-external-LSAs isn't supported yet by Quagga.
paule5b308d2005-10-29 20:19:49 +0000249
hasso63869f12004-04-19 14:43:46 +0000250@example
251@group
252router ospf
253 network 192.168.1.0/24 area 0.0.0.0
254 network 10.0.0.0/8 area 0.0.0.10
255 area 0.0.0.10 range 10.0.0.0/8
256@end group
257@end example
paule5b308d2005-10-29 20:19:49 +0000258
hasso63869f12004-04-19 14:43:46 +0000259With configuration above one Type-3 Summary-LSA with routing info 10.0.0.0/8 is
260announced into backbone area if area 0.0.0.10 contains at least one intra-area
261network (ie. described with router or network LSA) from this range.
paul718e3742002-12-13 20:15:29 +0000262@end deffn
263
hasso63869f12004-04-19 14:43:46 +0000264@deffn {OSPF Command} {area @var{a.b.c.d} range IPV4_PREFIX not-advertise} {}
265@deffnx {OSPF Command} {no area @var{a.b.c.d} range IPV4_PREFIX not-advertise} {}
266Instead of summarizing intra area paths filter them - ie. intra area paths from this
267range are not advertised into other areas.
268This command makes sense in ABR only.
269@end deffn
270
hasso6b3fac02004-04-20 04:11:36 +0000271@deffn {OSPF Command} {area @var{a.b.c.d} range IPV4_PREFIX substitute IPV4_PREFIX} {}
paul718e3742002-12-13 20:15:29 +0000272@deffnx {OSPF Command} {no area @var{a.b.c.d} range IPV4_PREFIX substitute IPV4_PREFIX} {}
hasso63869f12004-04-19 14:43:46 +0000273Substitute summarized prefix with another prefix.
paule5b308d2005-10-29 20:19:49 +0000274
hasso63869f12004-04-19 14:43:46 +0000275@example
276@group
277router ospf
278 network 192.168.1.0/24 area 0.0.0.0
279 network 10.0.0.0/8 area 0.0.0.10
280 area 0.0.0.10 range 10.0.0.0/8 substitute 11.0.0.0/8
281@end group
282@end example
paule5b308d2005-10-29 20:19:49 +0000283
hasso63869f12004-04-19 14:43:46 +0000284One Type-3 summary-LSA with routing info 11.0.0.0/8 is announced into backbone area if
285area 0.0.0.10 contains at least one intra-area network (ie. described with router-LSA or
286network-LSA) from range 10.0.0.0/8.
287This command makes sense in ABR only.
paul718e3742002-12-13 20:15:29 +0000288@end deffn
289
290@deffn {OSPF Command} {area @var{a.b.c.d} virtual-link @var{a.b.c.d}} {}
291@deffnx {OSPF Command} {area <0-4294967295> virtual-link @var{a.b.c.d}} {}
292@deffnx {OSPF Command} {no area @var{a.b.c.d} virtual-link @var{a.b.c.d}} {}
293@deffnx {OSPF Command} {no area <0-4294967295> virtual-link @var{a.b.c.d}} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000294@anchor{OSPF virtual-link}
paul718e3742002-12-13 20:15:29 +0000295@end deffn
296
297@deffn {OSPF Command} {area @var{a.b.c.d} shortcut} {}
298@deffnx {OSPF Command} {area <0-4294967295> shortcut} {}
299@deffnx {OSPF Command} {no area @var{a.b.c.d} shortcut} {}
300@deffnx {OSPF Command} {no area <0-4294967295> shortcut} {}
Paul Jakmaf912cb42006-07-27 23:30:16 +0000301Configure the area as Shortcut capable. See @cite{RFC3509}. This requires
paule5b308d2005-10-29 20:19:49 +0000302that the 'abr-type' be set to 'shortcut'.
paul718e3742002-12-13 20:15:29 +0000303@end deffn
304
305@deffn {OSPF Command} {area @var{a.b.c.d} stub} {}
306@deffnx {OSPF Command} {area <0-4294967295> stub} {}
307@deffnx {OSPF Command} {no area @var{a.b.c.d} stub} {}
308@deffnx {OSPF Command} {no area <0-4294967295> stub} {}
paule5b308d2005-10-29 20:19:49 +0000309Configure the area to be a stub area. That is, an area where no router
310originates routes external to OSPF and hence an area where all external
311routes are via the ABR(s). Hence, ABRs for such an area do not need
312to pass AS-External LSAs (type-5s) or ASBR-Summary LSAs (type-4) into the
313area. They need only pass Network-Summary (type-3) LSAs into such an area,
Paul Jakmaf912cb42006-07-27 23:30:16 +0000314along with a default-route summary.
paul718e3742002-12-13 20:15:29 +0000315@end deffn
316
317@deffn {OSPF Command} {area @var{a.b.c.d} stub no-summary} {}
318@deffnx {OSPF Command} {area <0-4294967295> stub no-summary} {}
319@deffnx {OSPF Command} {no area @var{a.b.c.d} stub no-summary} {}
320@deffnx {OSPF Command} {no area <0-4294967295> stub no-summary} {}
paule5b308d2005-10-29 20:19:49 +0000321Prevents an @command{ospfd} ABR from injecting inter-area
322summaries into the specified stub area.
paul718e3742002-12-13 20:15:29 +0000323@end deffn
324
325@deffn {OSPF Command} {area @var{a.b.c.d} default-cost <0-16777215>} {}
326@deffnx {OSPF Command} {no area @var{a.b.c.d} default-cost <0-16777215>} {}
paule5b308d2005-10-29 20:19:49 +0000327Set the cost of default-summary LSAs announced to stubby areas.
paul718e3742002-12-13 20:15:29 +0000328@end deffn
329
330@deffn {OSPF Command} {area @var{a.b.c.d} export-list NAME} {}
331@deffnx {OSPF Command} {area <0-4294967295> export-list NAME} {}
332@deffnx {OSPF Command} {no area @var{a.b.c.d} export-list NAME} {}
333@deffnx {OSPF Command} {no area <0-4294967295> export-list NAME} {}
hasso63869f12004-04-19 14:43:46 +0000334Filter Type-3 summary-LSAs announced to other areas originated from intra-
335area paths from specified area.
paule5b308d2005-10-29 20:19:49 +0000336
hasso63869f12004-04-19 14:43:46 +0000337@example
338@group
339router ospf
340 network 192.168.1.0/24 area 0.0.0.0
341 network 10.0.0.0/8 area 0.0.0.10
342 area 0.0.0.10 export-list foo
343!
344access-list foo permit 10.10.0.0/16
345access-list foo deny any
346@end group
347@end example
paule5b308d2005-10-29 20:19:49 +0000348
hasso63869f12004-04-19 14:43:46 +0000349With example above any intra-area paths from area 0.0.0.10 and from range
35010.10.0.0/16 (for example 10.10.1.0/24 and 10.10.2.128/30) are announced into
351other areas as Type-3 summary-LSA's, but any others (for example 10.11.0.0/16
352or 10.128.30.16/30) aren't.
paule5b308d2005-10-29 20:19:49 +0000353
354This command is only relevant if the router is an ABR for the specified
355area.
paul718e3742002-12-13 20:15:29 +0000356@end deffn
357
358@deffn {OSPF Command} {area @var{a.b.c.d} import-list NAME} {}
359@deffnx {OSPF Command} {area <0-4294967295> import-list NAME} {}
360@deffnx {OSPF Command} {no area @var{a.b.c.d} import-list NAME} {}
361@deffnx {OSPF Command} {no area <0-4294967295> import-list NAME} {}
hasso63869f12004-04-19 14:43:46 +0000362Same as export-list, but it applies to paths announced into specified area as
363Type-3 summary-LSAs.
364@end deffn
365
hasso808c0a72004-04-19 15:10:20 +0000366@deffn {OSPF Command} {area @var{a.b.c.d} filter-list prefix NAME in} {}
367@deffnx {OSPF Command} {area @var{a.b.c.d} filter-list prefix NAME out} {}
368@deffnx {OSPF Command} {area <0-4294967295> filter-list prefix NAME in} {}
369@deffnx {OSPF Command} {area <0-4294967295> filter-list prefix NAME out} {}
370@deffnx {OSPF Command} {no area @var{a.b.c.d} filter-list prefix NAME in} {}
371@deffnx {OSPF Command} {no area @var{a.b.c.d} filter-list prefix NAME out} {}
372@deffnx {OSPF Command} {no area <0-4294967295> filter-list prefix NAME in} {}
373@deffnx {OSPF Command} {no area <0-4294967295> filter-list prefix NAME out} {}
hassoc266ac72004-04-19 17:31:00 +0000374Filtering Type-3 summary-LSAs to/from area using prefix lists. This command
375makes sense in ABR only.
paul718e3742002-12-13 20:15:29 +0000376@end deffn
377
378@deffn {OSPF Command} {area @var{a.b.c.d} authentication} {}
379@deffnx {OSPF Command} {area <0-4294967295> authentication} {}
380@deffnx {OSPF Command} {no area @var{a.b.c.d} authentication} {}
381@deffnx {OSPF Command} {no area <0-4294967295> authentication} {}
paule5b308d2005-10-29 20:19:49 +0000382Specify that simple password authentication should be used for the given
383area.
paul718e3742002-12-13 20:15:29 +0000384@end deffn
385
386@deffn {OSPF Command} {area @var{a.b.c.d} authentication message-digest} {}
387@deffnx {OSPF Command} {area <0-4294967295> authentication message-digest} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000388
389@anchor{area authentication message-digest}Specify that OSPF packets
390must be authenticated with MD5 HMACs within the given area. Keying
391material must also be configured on a per-interface basis (@pxref{ip
392ospf message-digest-key}).
393
394MD5 authentication may also be configured on a per-interface basis
395(@pxref{ip ospf authentication message-digest}). Such per-interface
396settings will override any per-area authentication setting.
paul718e3742002-12-13 20:15:29 +0000397@end deffn
398
paul76b89b42004-11-06 17:13:09 +0000399@node OSPF interface
paul718e3742002-12-13 20:15:29 +0000400@section OSPF interface
401
paule5b308d2005-10-29 20:19:49 +0000402@deffn {Interface Command} {ip ospf authentication-key @var{AUTH_KEY}} {}
paul718e3742002-12-13 20:15:29 +0000403@deffnx {Interface Command} {no ip ospf authentication-key} {}
404Set OSPF authentication key to a simple password. After setting @var{AUTH_KEY},
405all OSPF packets are authenticated. @var{AUTH_KEY} has length up to 8 chars.
Paul Jakmaf912cb42006-07-27 23:30:16 +0000406
407Simple text password authentication is insecure and deprecated in favour of
Paul Jakmac3eab602006-07-28 04:42:39 +0000408MD5 HMAC authentication (@pxref{ip ospf authentication message-digest}).
paul718e3742002-12-13 20:15:29 +0000409@end deffn
410
Paul Jakmac3eab602006-07-28 04:42:39 +0000411@deffn {Interface Command} {ip ospf authentication message-digest} {}
412@anchor{ip ospf authentication message-digest}Specify that MD5 HMAC
413authentication must be used on this interface. MD5 keying material must
414also be configured (@pxref{ip ospf message-digest-key}). Overrides any
415authentication enabled on a per-area basis (@pxref{area
416authentication message-digest}).
paule2ea9fe2004-10-11 14:33:23 +0000417
418Note that OSPF MD5 authentication requires that time never go backwards
paule5b308d2005-10-29 20:19:49 +0000419(correct time is NOT important, only that it never goes backwards), even
paule2ea9fe2004-10-11 14:33:23 +0000420across resets, if ospfd is to be able to promptly reestabish adjacencies
421with its neighbours after restarts/reboots. The host should have system
Paul Jakma466c9652006-06-26 12:55:58 +0000422time be set at boot from an external or non-volatile source (eg battery backed clock, NTP,
paule2ea9fe2004-10-11 14:33:23 +0000423etc.) or else the system clock should be periodically saved to non-volative
424storage and restored at boot if MD5 authentication is to be expected to work
425reliably.
paul718e3742002-12-13 20:15:29 +0000426@end deffn
427
Paul Jakmac3eab602006-07-28 04:42:39 +0000428@deffn {Interface Command} {ip ospf message-digest-key KEYID md5 KEY} {}
429@deffnx {Interface Command} {no ip ospf message-digest-key} {}
430@anchor{ip ospf message-digest-key}Set OSPF authentication key to a
431cryptographic password. The cryptographic algorithm is MD5.
432
433KEYID identifies secret key used to create the message digest. This ID
434is part of the protocol and must be consistent across routers on a
435link.
436
437KEY is the actual message digest key, of up to 16 chars (larger strings
438will be truncated), and is associated with the given KEYID.
439@end deffn
440
paul718e3742002-12-13 20:15:29 +0000441@deffn {Interface Command} {ip ospf cost <1-65535>} {}
442@deffnx {Interface Command} {no ip ospf cost} {}
443Set link cost for the specified interface. The cost value is set to router-LSA's
444metric field and used for SPF calculation.
445@end deffn
446
447@deffn {Interface Command} {ip ospf dead-interval <1-65535>} {}
paule5b308d2005-10-29 20:19:49 +0000448@deffnx {Interface Command} {ip ospf dead-interval minimal hello-multiplier <2-20>} {}
paul718e3742002-12-13 20:15:29 +0000449@deffnx {Interface Command} {no ip ospf dead-interval} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000450@anchor{ip ospf dead-interval minimal} Set number of seconds for
451RouterDeadInterval timer value used for Wait Timer and Inactivity
452Timer. This value must be the same for all routers attached to a
453common network. The default value is 40 seconds.
paule5b308d2005-10-29 20:19:49 +0000454
455If 'minimal' is specified instead, then the dead-interval is set to 1
456second and one must specify a hello-multiplier. The hello-multiplier
457specifies how many Hellos to send per second, from 2 (every 500ms) to
45820 (every 50ms). Thus one can have 1s convergence time for OSPF. If this form
459is specified, then the hello-interval advertised in Hello packets is set to
4600 and the hello-interval on received Hello packets is not checked, thus
461the hello-multiplier need NOT be the same across multiple routers on a common
462link.
paul718e3742002-12-13 20:15:29 +0000463@end deffn
464
465@deffn {Interface Command} {ip ospf hello-interval <1-65535>} {}
466@deffnx {Interface Command} {no ip ospf hello-interval} {}
467Set number of seconds for HelloInterval timer value. Setting this value,
468Hello packet will be sent every timer value seconds on the specified interface.
469This value must be the same for all routers attached to a common network.
470The default value is 10 seconds.
paule5b308d2005-10-29 20:19:49 +0000471
472This command has no effect if @ref{ip ospf dead-interval minimal} is also
473specified for the interface.
paul718e3742002-12-13 20:15:29 +0000474@end deffn
475
476@deffn {Interface Command} {ip ospf network (broadcast|non-broadcast|point-to-multipoint|point-to-point)} {}
477@deffnx {Interface Command} {no ip ospf network} {}
478Set explicitly network type for specifed interface.
479@end deffn
480
481@deffn {Interface Command} {ip ospf priority <0-255>} {}
482@deffnx {Interface Command} {no ip ospf priority} {}
Paul Jakmaf912cb42006-07-27 23:30:16 +0000483Set RouterPriority integer value. The router with the highest priority
484will be more eligible to become Designated Router. Setting the value
485to 0, makes the router ineligible to become Designated Router. The
486default value is 1.
paul718e3742002-12-13 20:15:29 +0000487@end deffn
488
489@deffn {Interface Command} {ip ospf retransmit-interval <1-65535>} {}
490@deffnx {Interface Command} {no ip ospf retransmit interval} {}
491Set number of seconds for RxmtInterval timer value. This value is used
492when retransmitting Database Description and Link State Request packets.
493The default value is 5 seconds.
494@end deffn
495
496@deffn {Interface Command} {ip ospf transmit-delay} {}
497@deffnx {Interface Command} {no ip ospf transmit-delay} {}
498Set number of seconds for InfTransDelay value. LSAs' age should be
499incremented by this value when transmitting.
500The default value is 1 seconds.
501@end deffn
502
paul76b89b42004-11-06 17:13:09 +0000503@node Redistribute routes to OSPF
paul718e3742002-12-13 20:15:29 +0000504@section Redistribute routes to OSPF
505
506@deffn {OSPF Command} {redistribute (kernel|connected|static|rip|bgp)} {}
507@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) @var{route-map}} {}
508@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) metric-type (1|2)} {}
509@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) metric-type (1|2) route-map @var{word}} {}
510@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) metric <0-16777214>} {}
511@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) metric <0-16777214> route-map @var{word}} {}
512@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) metric-type (1|2) metric <0-16777214>} {}
513@deffnx {OSPF Command} {redistribute (kernel|connected|static|rip|bgp) metric-type (1|2) metric <0-16777214> route-map @var{word}} {}
514@deffnx {OSPF Command} {no redistribute (kernel|connected|static|rip|bgp)} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000515@anchor{OSPF redistribute}Redistribute routes of the specified protocol
516or kind into OSPF, with the metric type and metric set if specified,
517filtering the routes using the given route-map if specified.
518Redistributed routes may also be filtered with distribute-lists, see
519@ref{ospf distribute-list}.
Paul Jakmaf912cb42006-07-27 23:30:16 +0000520
521Redistributed routes are distributed as into OSPF as Type-5 External
522LSAs into links to areas that accept external routes, Type-7 External LSAs
523for NSSA areas and are not redistributed at all into Stub areas, where
524external routes are not permitted.
525
526Note that for connected routes, one may instead use
527@dfn{passive-interface}, see @ref{OSPF passive-interface}.
paul718e3742002-12-13 20:15:29 +0000528@end deffn
529
530@deffn {OSPF Command} {default-information originate} {}
531@deffnx {OSPF Command} {default-information originate metric <0-16777214>} {}
532@deffnx {OSPF Command} {default-information originate metric <0-16777214> metric-type (1|2)} {}
533@deffnx {OSPF Command} {default-information originate metric <0-16777214> metric-type (1|2) route-map @var{word}} {}
534@deffnx {OSPF Command} {default-information originate always} {}
535@deffnx {OSPF Command} {default-information originate always metric <0-16777214>} {}
536@deffnx {OSPF Command} {default-information originate always metric <0-16777214> metric-type (1|2)} {}
537@deffnx {OSPF Command} {default-information originate always metric <0-16777214> metric-type (1|2) route-map @var{word}} {}
538@deffnx {OSPF Command} {no default-information originate} {}
paule5b308d2005-10-29 20:19:49 +0000539Originate an AS-External (type-5) LSA describing a default route into
540all external-routing capable areas, of the specified metric and metric
541type. If the 'always' keyword is given then the default is always
542advertised, even when there is no default present in the routing table.
paul718e3742002-12-13 20:15:29 +0000543@end deffn
544
545@deffn {OSPF Command} {distribute-list NAME out (kernel|connected|static|rip|ospf} {}
546@deffnx {OSPF Command} {no distribute-list NAME out (kernel|connected|static|rip|ospf} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000547@anchor{ospf distribute-list}Apply the access-list filter, NAME, to
548redistributed routes of the given type before allowing the routes to
549redistributed into OSPF (@pxref{OSPF redistribute}).
paul718e3742002-12-13 20:15:29 +0000550@end deffn
551
552@deffn {OSPF Command} {default-metric <0-16777214>} {}
553@deffnx {OSPF Command} {no default-metric} {}
554@end deffn
555
556@deffn {OSPF Command} {distance <1-255>} {}
557@deffnx {OSPF Command} {no distance <1-255>} {}
558@end deffn
559
560@deffn {OSPF Command} {distance ospf (intra-area|inter-area|external) <1-255>} {}
561@deffnx {OSPF Command} {no distance ospf} {}
562@end deffn
563
564@deffn {Command} {router zebra} {}
565@deffnx {Command} {no router zebra} {}
566@end deffn
567
paul76b89b42004-11-06 17:13:09 +0000568@node Showing OSPF information
paul718e3742002-12-13 20:15:29 +0000569@section Showing OSPF information
570
571@deffn {Command} {show ip ospf} {}
Paul Jakmac3eab602006-07-28 04:42:39 +0000572@anchor{show ip ospf}Show information on a variety of general OSPF and
573area state and configuration information.
paul718e3742002-12-13 20:15:29 +0000574@end deffn
575
576@deffn {Command} {show ip ospf interface [INTERFACE]} {}
paule5b308d2005-10-29 20:19:49 +0000577Show state and configuration of OSPF the specified interface, or all
578interfaces if no interface is given.
paul718e3742002-12-13 20:15:29 +0000579@end deffn
580
581@deffn {Command} {show ip ospf neighbor} {}
582@deffnx {Command} {show ip ospf neighbor INTERFACE} {}
583@deffnx {Command} {show ip ospf neighbor detail} {}
584@deffnx {Command} {show ip ospf neighbor INTERFACE detail} {}
585@end deffn
586
587@deffn {Command} {show ip ospf database} {}
588@end deffn
589
590@deffn {Command} {show ip ospf database (asbr-summary|external|network|router|summary)} {}
591@deffnx {Command} {show ip ospf database (asbr-summary|external|network|router|summary) @var{link-state-id}} {}
592@deffnx {Command} {show ip ospf database (asbr-summary|external|network|router|summary) @var{link-state-id} adv-router @var{adv-router}} {}
593@deffnx {Command} {show ip ospf database (asbr-summary|external|network|router|summary) adv-router @var{adv-router}} {}
594@deffnx {Command} {show ip ospf database (asbr-summary|external|network|router|summary) @var{link-state-id} self-originate} {}
595@deffnx {Command} {show ip ospf database (asbr-summary|external|network|router|summary) self-originate} {}
596@end deffn
597
598@deffn {Command} {show ip ospf database max-age} {}
599@end deffn
600
601@deffn {Command} {show ip ospf database self-originate} {}
602@end deffn
603
paul718e3742002-12-13 20:15:29 +0000604@deffn {Command} {show ip ospf route} {}
paule5b308d2005-10-29 20:19:49 +0000605Show the OSPF routing table, as determined by the most recent SPF calculation.
paul718e3742002-12-13 20:15:29 +0000606@end deffn
607
paul76b89b42004-11-06 17:13:09 +0000608@node Debugging OSPF
paul718e3742002-12-13 20:15:29 +0000609@section Debugging OSPF
610
611@deffn {Command} {debug ospf packet (hello|dd|ls-request|ls-update|ls-ack|all) (send|recv) [detail]} {}
612@deffnx {Command} {no debug ospf packet (hello|dd|ls-request|ls-update|ls-ack|all) (send|recv) [detail]} {}
613@end deffn
614
615@deffn {Command} {debug ospf ism} {}
616@deffnx {Command} {debug ospf ism (status|events|timers)} {}
617@deffnx {Command} {no debug ospf ism} {}
618@deffnx {Command} {no debug ospf ism (status|events|timers)} {}
619@end deffn
620
621@deffn {Command} {debug ospf nsm} {}
622@deffnx {Command} {debug ospf nsm (status|events|timers)} {}
623@deffnx {Command} {no debug ospf nsm} {}
624@deffnx {Command} {no debug ospf nsm (status|events|timers)} {}
625@end deffn
626
627@deffn {Command} {debug ospf lsa} {}
628@deffnx {Command} {debug ospf lsa (generate|flooding|refresh)} {}
629@deffnx {Command} {no debug ospf lsa} {}
630@deffnx {Command} {no debug ospf lsa (generate|flooding|refresh)} {}
631@end deffn
632
633@deffn {Command} {debug ospf zebra} {}
634@deffnx {Command} {debug ospf zebra (interface|redistribute)} {}
635@deffnx {Command} {no debug ospf zebra} {}
636@deffnx {Command} {no debug ospf zebra (interface|redistribute)} {}
637@end deffn
638
639@deffn {Command} {show debugging ospf} {}
640@end deffn
641
paule5b308d2005-10-29 20:19:49 +0000642@node OSPF Configuration Examples
643@section OSPF Configuration Examples
644A simple example, with MD5 authentication enabled:
645
646@example
647@group
648!
649interface bge0
650 ip ospf authentication message-digest
651 ip ospf message-digest-key 1 md5 ABCDEFGHIJK
652!
653router ospf
654 network 192.168.0.0/16 area 0.0.0.1
655 area 0.0.0.1 authentication message-digest
656@end group
657@end example
658
659An @acronym{ABR} router, with MD5 authentication and performing summarisation
660of networks between the areas:
661
662@example
663@group
664!
665password ABCDEF
666log file /var/log/quagga/ospfd.log
667service advanced-vty
668!
669interface eth0
670 ip ospf authentication message-digest
671 ip ospf message-digest-key 1 md5 ABCDEFGHIJK
672!
673interface ppp0
674!
675interface br0
676 ip ospf authentication message-digest
677 ip ospf message-digest-key 2 md5 XYZ12345
678!
679router ospf
680 ospf router-id 192.168.0.1
681 redistribute connected
682 passive interface ppp0
683 network 192.168.0.0/24 area 0.0.0.0
684 network 10.0.0.0/16 area 0.0.0.0
685 network 192.168.1.0/24 area 0.0.0.1
686 area 0.0.0.0 authentication message-digest
687 area 0.0.0.0 range 10.0.0.0/16
688 area 0.0.0.0 range 192.168.0.0/24
689 area 0.0.0.1 authentication message-digest
690 area 0.0.0.1 range 10.2.0.0/16
691!
692@end group
693@end example