Wednesday, February 12, 2014

OSPF Virtual Link - Complex Scenario



Task 1
Replace OSPF area 0 configured between R5 and SW3 with OSPF area 59. Advertise SW3 loopback0 into OSPF area 300. Ensure full OSPF connectivity given new design.

Questions
Try to answer the following questions:
  1. What does OSPF virtual Link do?
  2. Are 'hellos' sent over virtual link?
  3. What are limitations of using OSPF virtual link?
  4. Does OSPF send 'hello' packets over virtual link?
  5. What is the alternative to virtual link to connect separated OSPF areas to area 0?
Lab Solution

Solution configuration can be accessed below; solution contains task 1 and task 2 (if you want to save it, click the link, then go to File-->Download):
https://drive.google.com/file/d/0BwE5C95tpjZOdDU0OTktU1hIU3M/edit?usp=sharing


Task 1
Replace OSPF area 0 configured between R5 and SW3 with OSPF area 59. Advertise SW3 loopback0 into OSPF area 300. Ensure full OSPF connectivity given new design.

R4 Current Config:
!
router ospf 1
 area 45 virtual-link 10.0.5.5
 network 172.16.0.0 0.0.0.255 area 0
 network 172.16.45.0 0.0.0.255 area 45
!

R5 Config:
!
router ospf 1
 network 172.16.59.5 0.0.0.0 area 58
 network 172.16.45.5 0.0.0.0 area 45
 area 45 virtual-link 10.0.4.4
 area 58 virtual-link 10.0.9.9
!

SW3 Config:
!
router ospf 1
 network 172.16.59.9 0.0.0.0 area 58
 network 10.0.9.9 0.0.0.0 area 300
 area 58 virtual-link 10.0.5.5 
!

Note!
In order to connect area 300 to the backbone area (area 0), two virtual links had to be configured: first, between R4 and R5 (making R5 new ABR), then between R5 and SW3, so that the loopback of SW3 (10.0.9.9/32) can be propagated to the rest of the OSPF domain.

Pic. 2 - R5's Two Virtual Links.


Pic. 3 - Ping Test from SW3 Loopback0.


Study Drill

OSPF virtual link is extending the area 0 (backbone area) providing virtual point-to-point path between two ABRs. We must remember that we cannot create a virtual link over a transit area that is stub. Transit area is the one over which we create VL. Virtual link is not used to send hello packets. Also, LSAs learned via VL are not aging as learned in a traditional way (DNA='do not age' bit is set). LSA types 1,2,3,4 from area 0 are exchanged using VL, but LSA type 5 are not. LSA type 5 (external) have scope of domain (not an area), so this explains why a transit area cannot be stub.

If a transit area (the one we try to use to get to area 0) is a stub area, alternatively we can patch the network using GRE tunnels (we will use that method in some future lab).

As for the hello packets, after VL has been configured using router-id of connecting devices (not their real IP addresses), the intra-area shortest path is calculated and the 'hello' packets are exchanged (using 'unicast', not multicast). After discovering the new connection using VL, normal LSDB exchange is performed.