search

FRRouting / frr

The FRRouting Protocol Suite
https://frrouting.org/
Other
3.19k stars 1.23k forks source link

Learning routing can be problematic when running dynamic routing using OpenVPN's interface #7471

Open hothotstreet opened 3 years ago

hothotstreet commented 3 years ago

frr version:7.2

When I used openVPN's tunnel interface to run the ISIS/RIP dynamic routing, if it ran for a long time, the neighbor state would be lost and the route would be lost. The declared interface could be restored after being deleted and re-declared. What's the matter

donaldsharp commented 3 years ago

Can you please include the relevant data asked for when you opened the issue? This is too open ended of a question to even begin to point you in the right direction

hothotstreet commented 3 years ago

Can you please include the relevant data asked for when you opened the issue? This is too open ended of a question to even begin to point you in the right direction

here is my config: openvpn server: router isis cpegw net 49.0000.0000.0000.0001.00 metric-style wide is-type level-2-only

interface tapkj ip router isis cpegw isis circuit-type level-2-only no isis hello padding isis hello-interval 2 isis hello-multiplier 5

openvpn client: router isis cpegw is-type level-2-only net 49.0000.0000.0000.0663.00

interface tapkj ip router isis cpegw isis circuit-type level-2-only isis hello-interval 2 isis hello-multiplier 5 no isis hello padding

interface br-ipsec ip router isis cpegw isis circuit-type level-2-only isis hello-interval 2 isis hello-multiplier 5 no isis hello padding

The start openvpn client connection server is normal, I in the client after the connection is successful and add related ISIS routing configuration, then the neighbours and routing learning is normal, because it is run in a public environment, may be network instability led to the suspension of openvpn tunnels, but behind the reconnection successful again, but this time the ISIS neighbour is built up, the configuration is also in the network is also good.Here are some of the states of the OpenVPN client when something goes wrong:

show isis interface

Area cpegw: Interface CircId State Type Level br-ipsec 0x15 Up lan L2

The tunnel interface of OpenVPN is not in the declaration interface of ISIS, but my configuration exists. I must delete the tunnel routing declaration interface of OpenVPN and re-declare it before I can learn it