思科设备和juniper防火墙对接不成功，OSPF起不来

恒向零度C

.May 21 12:19:45.828 GMT: OSPF: Vlan60 Nbr 10.244.0.13: Prepare dbase exchange
.May 21 12:19:45.832 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CD9 opt 0x52 flag 0x7 len 32
.May 21 12:19:45.836 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CD8 opt 0x2 flag 0x2 len 1392  mtu 1500 state EXSTART
.May 21 12:19:45.836 GMT: OSPF: Unrecognized dbd for EXSTART
.May 21 12:19:45.836 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CD9 opt 0x2 flag 0x7 len 32  mtu 1500 state EXSTART
.May 21 12:19:45.836 GMT: OSPF: First DBD and we are not SLAVE
.May 21 12:19:49.696 GMT: OSPF: Neighbor change Event on interface Vlan60
.May 21 12:19:49.696 GMT: OSPF: DR/BDR election on Vlan60
.May 21 12:19:49.696 GMT: OSPF: Elect BDR 10.244.109.20
.May 21 12:19:49.696 GMT: OSPF: Elect DR 10.244.109.21
.May 21 12:19:50.868 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CD9 opt 0x52 flag 0x7 len 32
.May 21 12:19:50.868 GMT: OSPF: Retransmitting DBD to 10.244.0.13 on Vlan60 [1]
.May 21 12:19:50.872 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CD9 opt 0x2 flag 0x2 len 1392  mtu 1500 state EXSTART
.May 21 12:19:50.872 GMT: OSPF: NBR Negotiation Done. We are the MASTER
.May 21 12:19:50.880 GMT: OSPF: Vlan60 Nbr 10.244.0.13: Summary list built, size 2945
.May 21 12:19:50.880 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CDA opt 0x52 flag 0x3 len 1452
.May 21 12:19:50.884 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CDA opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:50.884 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CDB opt 0x52 flag 0x3 len 1452
.May 21 12:19:50.884 GMT: OSPF: Rcv LS REQ from 10.244.0.13 on Vlan60 length 36 LSA count 1
.May 21 12:19:50.884 GMT: OSPF: Send UPD to 10.244.0.14 on Vlan60 length 40 LSA count 1
.May 21 12:19:51.076 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CDB opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:51.076 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CDC opt 0x52 flag 0x3 len 1452
.May 21 12:19:51.076 GMT: OSPF: Rcv LS UPD from 10.244.0.13 on Vlan60 length 64 LSA count 1
.May 21 12:19:51.084 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CDC opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:51.084 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CDD opt 0x52 flag 0x3 len 1452
.May 21 12:19:51.088 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CDD opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:51.088 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CDE opt 0x52 flag 0x3 len 1452
.May 21 12:19:51.828 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CDE opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:51.828 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CDF opt 0x52 flag 0x3 len 1452
.May 21 12:19:51.840 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CDF opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:51.840 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CE0 opt 0x52 flag 0x3 len 1452
.May 21 12:19:51.844 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CE0 opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:51.844 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CE1 opt 0x52 flag 0x3 len 1452
.May 21 12:19:52.576 GMT: OSPF: Rcv DBD from 10.244.0.13 on Vlan60 seq 0x105CE1 opt 0x2 flag 0x2 len 1392  mtu 1500 state EXCHANGE
.May 21 12:19:52.580 GMT: OSPF: Send DBD to 10.244.0.13 on Vlan60 seq 0x105CE2 opt 0x52 flag 0x3 len 1452

astray0

show ip ospf interface  看下两边的network-type是否一致

alejandro111

OSPF在邻居建立过程中卡在exchange状态， 绝大多数原因是双端MTU值不匹配造成的， 尤其是当思科设备与其它厂商设备建邻居时常见。可以直接检查双端配置的MTU值，或者在思科路由器上debug ip ospf adjancy。 这样可以看到整个OSPF邻居建立过程， 如果确实有MTU的问题， 会明显的看到MTU mismatch这个log。

恒向零度C

已经解决了，不是这些问题，是juniper双机配置问题，谢谢各位！

恒向零度C

alejandro111 发表于 2017-5-24 10:18
OSPF在邻居建立过程中卡在exchange状态， 绝大多数原因是双端MTU值不匹配造成的， 尤其是当思科设备与其它 ...

已经解决了，不是这些问题，是juniper双机配置问题，谢谢各位！

恒向零度C

alejandro111 发表于 2017-5-24 10:18
OSPF在邻居建立过程中卡在exchange状态， 绝大多数原因是双端MTU值不匹配造成的， 尤其是当思科设备与其它 ...

已经解决了，不是这些问题，是juniper双机配置问题，谢谢各位！