Rajeev, By turning off Virtual Address in OSPF on the Nokia, both Nokia are able to participate in OSPF without problem. However, you definitely will have problem if the Active Nokia get rebooted for any reasons. Furthermore, if someone decides to do "clear ip ospf process" on the Cisco side, OSPF on the Active Nokia will be stuck in "EXSTART" mode. Furthermore, I've tested this repeatedly with IPSO 3.9 build 35, build 41 and buidl 45, by turning off virtual address in OSPF on the Nokia, after a reboot of the Active Nokia. After the Active Nokia comes back online, I will get OSPF adjacency with the cisco device but NO ROUTES in my Nokia routing table. By turning "on" the virutal IP address, I am able to eliminate this problem. However, if I reboot the standby nokia, after the standby comes back online, I lose connectivity for about 30 seconds. I've a Nokia TAC opened for this. By the way, in IPSO 3.9 or higher, the virtual address in OSPF, by default, is "off". I will keep you posted Rajeev. Thanks. cisco4ng
Rajeev Gupta <[EMAIL PROTECTED]> wrote: We have one of our major VRRP (active/standby) sites running OSPF - we have OSPF>Virtual Address turned 'off' which is so by default in IPSO 3.7 and also in 3.8 - and both of our members participating in OSPF without a problem - the site has been working fine for the last more than a year. Nokia recommends we turn OSPF>Virtual Address 'on' in Voyager so that only the active pariticipates in OSPF but we had the same issue - the failover does not update the routes on the Standby 'what Nokia tech has told you:"immdly" - the bigger the amount of route data, more the time it will take to converge and you are right, it is a bad design on Nokia's part. There are some flakiness issues which Nokia tried to blame on our OSPF configuration but Nokia tends to speculate more than actually test thier own design. We have resolved those 'flakiness' issues without accepting Nokia's recommendation - so, my guess is that perhaps, in 3.9, Nokia might have set the "Virtual Address:on" by default instead of "off" as in 3.7 or 3.8 but you can try turning it off and see if this helps. Rajeev On 1/19/06, cisco4ng wrote: > can someone help me with this problem? > I have a pair of Nokia IP650 running IPSO 3.9 build 45. > They are running Nokia VRRP in HA (Active/Standby) mode. > THERE IS NO CHECKPOINT RUNNING ON THIS PAIR OF NOKIA. > > I am running OSPF on this pair of Nokia and this pair > of Nokia is forming OSPF adjacency with a Cisco VXR7206 > router running IOS 12.3T. The Cisco device can see ospf > routes from the Nokia and vice versa. Now here is my > problem: > > According to Nokia documentation, with IPSO 3.9 or higher, > the cisco router only sees ospf neighbor from the Nokia > VRRP ip address. What it means is that from the cisco > point of view, it only sees the pair of Nokia IP650 as > A SINGLE device. Now, when I get on the Standby Nokia, > in iclid mode, I type "show ospf neighbor" or "show > route ospf", I see neither the cisco router neighbor or > any ospf route on the secondary. According to Nokia, > I will NOT see ospf routes or ospf neighbor of the cisco > router on the standby Nokia at all because the OSPF > adjacency is done via the VRRP ip address of the Nokia. > The problem is that if the Active Nokia goes down > for any reasons, it takes about 30 seconds for the > Standby to form OSPF with the Cisco device and OSPF > routes to converge. Well, I have time-sensitive > applications that will die within that time frame. > It looks to me like this is a very poor way of > implementing OSPF on the Nokia. > > Is there a work around for OSPF to converge immediately > on the Standby Nokia if something happen to the Active > Nokia? Nokia TAC told me that OSPF will converge > immediately on the standby if something happen to the > Active Nokia but during my testing, that is not the case. > > comments anyone? > TIA > cisco4ng > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Yahoo! Photos Got holiday prints? See all the ways to get quality prints in your hands ASAP. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
