I have an interesting problem in which enabling EIGRP on the PE for connecting to the CE router, causes OSPF in the MPLS routers to drop their neighbour and establish the session again.
I have attached a diagram showing the MPLS environment with the attached CE routers. Also attached are the appropriate configuration extracts from PE2 and PE4. Note that the configuration uses port-channel 61 on each PE for connecting to the CE routers and currently under the address family in EIGRP the port channel is in passive state until I can find an answer.
*Jan 19 13:43:51: %DUAL-5-NBRCHANGE: EIGRP-IPv4:(21) 1: Neighbor 10.248.1.46 (Port-channel61) is up: new adjacency
*Jan 19 13:44:02: %OSPF-5-ADJCHG: Process 1, Nbr 10.248.255.225 on Port-channel91 from FULL to DOWN, Neighbor Down: Dead timer expired
*Jan 19 13:44:02: %OSPF-5-ADJCHG: Process 1, Nbr 10.248.255.225 on Port-channel91 from LOADING to FULL, Loading Done
*Jan 19 13:44:04: %OSPF-5-ADJCHG: Process 1, Nbr 10.248.255.230 on Port-channel93 from FULL to DOWN, Neighbor Down: Dead timer expired
*Jan 19 13:44:05: %OSPF-5-ADJCHG: Process 1, Nbr 10.248.255.230 on Port-channel93 from LOADING to FULL, Loading Done
What seems to fix the problem is removing from OSPF the fast hello packets feature. It would appear that applying EIGRP causes an interrupt to the routing process which they results in the OSPF dead timer expiring.
Not sure why this is the case, but without BFD supporting SSO what other choice is there but too enable fast hellos for OSPF?
Removing the configuration for the etherchannel between the CE and PE made no difference to the outcome, OSPF still drops out because of the dead timer expiring.
You're understanding is correct on my choice of fast hello's as BFD doesn't support SSO as we have dual supervisors. Without fast hellos and the failure of a supervisor, convergence time is very excessive.
Is it common if BFD isn't support that fast hello's should be an option? Considering the links between the PE's is a DWDM network totally 30G, it isn't a throughput issue but must be related to a process issue with the local supervisor.
We have a request into the TAC at the present but the response I received back was that the OSPF fast hello implementation doesn't provide enough room for error. After hours of testing, the only configuration that proved successfully was setting the OPSF hello interval to 1 second and the dead interval to 4 seconds, anything less the end result was the same.
To answer your question on the number of VRFs running EIGRP, we currently have two, the problem one with about 4000 routing entries and the other one with about a dozen or so.
The conclusion I have come to is that the supervisor (sup720-10G-3C) is unable to handle the import of the 4000 entry routing table (the smaller one is fine.
Not an ideal situation having a convergence time of 4 seconds so may need to look into what happens if I get the EIGRP routes redistributed in OSPF at the CE.
With XR 4.2.0 the ASR9000 is releasing a new line of hardware models. This amongst others is the RSP440, the next generation RSP with faster switch fabric along with Typhoon based Linecards, the next generation network processor.
The Cisco EPN system incorporates a network architecture designed to consolidate multiples services on a single Multiprotocol Label Switching (MPLS) transport network. This network is designed primarily based on...
Internet security is important with the increasing attacks that are happening every day. Many internet and browsing security solutions exist, but some are not very easy to use or maybe the question is how can I enable them?