ISIS routes not being advertised into OSPF

[Anonymous]

Hi,

Must be missing some configuration but can’t see it.

In summary I’m trying to redistribute ISIS routes into OSPF with this command:

router ospf
   redistribute isis
   redistribute isis enable
exit
ip ospf apply redistribute isis

There is basically one P2P link between a VSP and S8 that has a full adjacency and is sharing the OSPF routing table. I can ping anything from the VSP on the S8 network, so thats all working well.

The IP addresses I can ping from the S8 to the VSP are only the OSPF networks I have configured on the VSP, basically I can not ping anything that’s in the ISIS routing table that includes the CLIP’s and Mgmt CLIP.

Here is the view of the ISIS routing table on the VSP:

Por-DC1-Core1:1#% show ip route protocol isis
************************************************************************************
                Command Execution Time: Thu Dec 03 23:07:49 2020 GMT
************************************************************************************
=====================================================================================================
                                       IP Route - GlobalRouter
=====================================================================================================
                                                     NH                      INTER
DST             MASK            NEXT                 VRF/ISID         COST   FACE     PROT AGE TYPE PRF
-----------------------------------------------------------------------------------------------------
172.22.0.212    255.255.255.255 Por-DC1-Core2        GlobalRouter     10     4051     ISIS 0   IBS  7
172.22.0.221    255.255.255.255 Por-DC2-Core1        GlobalRouter     10     4051     ISIS 0   IBS  7
172.22.0.222    255.255.255.255 Por-DC2-Core2        GlobalRouter     20     4051     ISIS 0   IBS  7
172.22.1.212    255.255.255.252 Por-DC2-Core1        GlobalRouter     10     4051     ISIS 0   IBS  7
172.22.1.220    255.255.255.252 Por-DC1-Core2        GlobalRouter     10     4051     ISIS 0   IBS  7
172.22.1.244    255.255.255.252 Por-DC1-Core2        GlobalRouter     10     4051     ISIS 0   IBS  7
192.168.200.212 255.255.255.255 Por-DC1-Core2        GlobalRouter     10     4051     ISIS 0   IBS  7
192.168.200.221 255.255.255.255 Por-DC2-Core1        GlobalRouter     10     4051     ISIS 0   IBS  7
192.168.200.222 255.255.255.255 Por-DC2-Core2        GlobalRouter     20     4051     ISIS 0   IBS  7

The VLAN being used to connect the VSP and S8 is 3901, on the S8 you can see I’m only learning OSPF interfaces that I have configured on the VSP’s, none of the ISIS routes are being learnt?

PorLANCore01(su)->show ip route ospf |find vlan.0.3901
O      172.22.1.208/30     [110/20]     via       172.22.1.201     vlan.0.3901              55m26s
O      172.22.1.212/30     [110/30]     via       172.22.1.201     vlan.0.3901              55m26s
O      172.22.1.216/30     [110/20]     via       172.22.1.201     vlan.0.3901              55m26s
O      172.22.1.220/30     [110/30]     via       172.22.1.201     vlan.0.3901              55m26s

Here is a bit more of a snapshot of the VSP config

interface GigabitEthernet 1/16
   encapsulation dot1q
exit

router isis
   spbm 1
   spbm 1 nick-name d.02.11
   spbm 1 b-vid 4051-4052 primary 4051
   spbm 1 multicast enable
   spbm 1 ip enable
   spbm 1 smlt-virtual-bmac 00:00:84:04:01:01
   spbm 1 smlt-peer-system-id 020d.0020.0221
exit

mlt 501 enable name "NNI-QSFP-DC1"
mlt 501 member 1/18
mlt 501 encapsulation dot1q
mlt 503 enable name "NNI-DC1-DC2"
mlt 503 member 1/17
mlt 503 encapsulation dot1q

ip prefix-list "suppressIST" 172.22.1.240/30 id 1 ge 29 le 29
ip prefix-list "suppressIST" 172.22.1.244/30 id 1 ge 29 le 29

vlan members remove 1 1/1-1/18 portmember

vlan create 3401 name "OSP P2P DC1-CR1 to DC1-CR2" type port-mstprstp 0
vlan i-sid 3401 123401
interface Vlan 3401
   ip address 172.22.1.209 255.255.255.252 2
   ip ospf enable
exit
vlan create 3403 name "OSP P2P DC-CR1 to DC2-CR1" type port-mstprstp 0
vlan i-sid 3403 123403
interface Vlan 3403
   ip address 172.22.1.217 255.255.255.252 3
   ip ospf enable
exit
vlan create 3901 name "OSPF P2P Legacy to CR1" type port-mstprstp 0
vlan members 3901 1/16 portmember
vlan i-sid 3901 123901
interface Vlan 3901
   ip address 172.22.1.201 255.255.255.252 1
   ip ospf enable
exit
vlan create 4051 type spbm-bvlan
vlan create 4052 type spbm-bvlan
vlan create 4053 type port-mstprstp 0
vlan i-sid 4053 124053
interface Vlan 4053
   ip address 172.22.1.241 255.255.255.252 0
exit
mgmt clip vrf GlobalRouter
   ip address 192.168.200.211/32
   enable
exit
virtual-ist  peer-ip 172.22.1.242 vlan 4053
interface mlt 501
   isis
   isis spbm 1
   isis enable
exit
interface mlt 503
   isis
   isis spbm 1
   isis enable
exit
interface GigabitEthernet 1/16
   default-vlan-id 0
   no shutdown
exit
interface GigabitEthernet 1/17
   default-vlan-id 0
   no shutdown
   no spanning-tree mstp  force-port-state enable
   no spanning-tree mstp msti 62 force-port-state enable
exit
interface GigabitEthernet 1/18
   default-vlan-id 0
   no shutdown
   no spanning-tree mstp  force-port-state enable
   no spanning-tree mstp msti 62 force-port-state enable
exit
route-map "suppressIST" 1
   no permit
   enable
   match network "suppressIST"
   set metric-type type2
   set nssa-pbit enable
exit
route-map "suppressIST" 2
   permit
   enable
   match protocol local
exit
ip route 0.0.0.0 0.0.0.0 172.22.1.202 weight 1
interface loopback 1
   ip address 1 172.22.0.111/255.255.255.255
exit
router isis
   sys-name "Por-DC1-Core1"
   is-type l1
   system-id 020d.0020.0211
   manual-area 49.0001
exit
router isis enable

cfm spbm mepid 811
cfm spbm enable

router ospf enable
router ospf
   router-id 172.22.0.211
exit
router ospf
   redistribute isis
   redistribute isis enable
exit
router isis
   redistribute direct
   redistribute direct route-map "suppressIST"
   redistribute direct enable
exit
end
ip ospf apply redistribute isis
isis apply redistribute direct

Appreciate any help in advance.

Many thanks

[PeterK]

In addition to this thread, there is a limitation, regarding redistribution, when using VRFs.

It’s not important for the root cause of this thread but maybe interessting for someone.

You can’t pickup routes in GRT which you got via ISIS from a VRF and redistribute them into OSPF.

OS was VOSS 8.1.5

I don’t know if this is/would changed in a future release.

[Miguel-Angel_RO]

[Anonymous · Accepted solution]

Thanks Jay and Mig, that worked when I added ASBR config and did a 

ip ospf apply redistribute isis

Did get the following error, running version 8.2, when using the route-policy command:

Por-DC2-Core1:1(config-ospf)#redistribute isis route-policy isis-internal
This command is deprecated/obsolete. Please use 'route-map' instead.

Found this article though:

https://gtacknowledge.extremenetworks.com/articles/Solution/000048823

So the final config looked like the below:
 

router ospf
as-boundary-router enable
redistribute direct
redistribute direct enable
exit

route-map "isis-internal" 1
permit
enable
match metric-type-isis internal

route-map "isis-internal" 1
permit
enable
match metric-type-isis internal

router ospf
redistribute isis metric-type type1 
redistribute isis route-map "isis-internal"

ip ospf apply redistribute isis

Many thanks for your help, really appreciated it.

Cheers,

Martin

[Jay2009]

Hey Martin, 

Turn on ASBR on the VSP like stated in the GTAC case. Also redistribute your direclty connected interfaces into both ISIS and OSPF.