10-04-2024 01:15 PM - edited 10-07-2024 06:20 AM
One of my areas has 3 switches in a stub, i'm trying to advertise a static route to a client back to the other switches in the area, but for some reason it refuses to display in the others in the area... i'm guessing this is because it's a stub, but is there a way to swap to nssa without having to drop/disable the entire ospf config, is that even the issue?
simple config ....
sw1/2 example
configure ospf routerid 172.16.0.1
enable ospf
configure ospf restart both
create ospf area 10.0.0.1
configure ospf area 10.0.0.1 interarea-filter ospf_no_export
configure ospf area 10.0.0.1 stub summary stub-default-cost 10
configure ospf add vlan SITE_BACKBONE area 10.0.0.1
configure ospf vlan SITE_BACKBONE priority 10
STUB
create vlan CUSTOMER_VLAN
configure vlan CUSTOMER_VLAN ipaddress 20.20.20.1/30
enable ipforwarding CUSTOMER_VLAN
config iproute add 10.10.10.0/24 20.20.20.2
configure ospf routerid 172.16.0.2
enable ospf
configure ospf restart both
enable ospf export static static-to-ospf
create ospf area 10.0.0.1
configure ospf area 10.0.0.1 stub summary stub-default-cost 10
configure ospf add vlan SITE_BACKBONE area 10.0.0.1
configure ospf vlan SITE_BACKBONE priority 0
configure ospf add vlan CUSTOMER_VLAN area 10.0.0.1 link-type point-to-point passive
configure ospf vlan CUSTOMER_VLAN priority 0
The sw1/2 learns the customer_vlan subnet and i can ping the customers vlan ip and the customers remote end from core... but the example 10.10.10.0/24 subnet doesn't reach the core...
if i check the lsdb on the pop site, i can see it listed as an as-external lsb, but i don't get that on the core side.
as a note the configs for policies are...
on sw1/2:
ospf_no_export.pol
entry mgmt_route {
if match any {
nlri 192.168.1.0/24;
}
then {
deny;
}
}
entry allow_rest {
if match any {
}
then {
permit;
}
}
on SITE:
static-to-ospf.pol
entry 10 {
if match any {
nlri 10.10.10.0/24;
}
then {
cost-type ase-type-1;
permit;
}
}
i've tried with the cost set and with just permit, neither seem to make a difference it never shows up in core.