I have connected subnets on these interfaces: Interface Name: fake-new-net Subnet: 2001:630:212:f17::1/64 Interface Name: ACN-Checkpoint Subnet: 2001:630:212:f00::1/64 Interface Name: iv-UIS-Networks Subnet: 2001:630:212:f05::1/64 Interface iv-UIS-Networks is the link to another vDom with another ospf6 router. Here is my OSPF6 config: ENG-SPARE-2 (vUIS) # sh router ospf6 config router ospf6 set router-id 128.232.129.2 config area edit 128.232.128.0 set type nssa next end config ospf6-interface edit "vUIS-OSPF" set area-id 128.232.128.0 set interface "iv-UIS-Networks" next end config redistribute "connected" set status enable end config redistribute "static" set status enable end Subnets 2001:630:212:f00::1/64 and 2001:630:212:f17::1/64 are connected and should be injected into OSPF6 as I have redistribute connected enabled. This is what I have in OSPF6routing table: C 2001:630:212:f00::/64 via ::, ACN-Checkpoint, C 2001:630:212:f17::/64 via ::, fake-new-net, ''Via ::'' I think is a mistake and that’s why the neighbouring router gets OSPF6 route incorrect: O N2 2001:630:212:f00::/64 [110/10] via ::, iv-Networks-UIS, O N2 2001:630:212:f17::/64 [110/10] via ::, iv-Networks-UIS, The Hosts on these subnets are unreachable because route ''::'' is not a valid route. (dot really know what that is) If I add another ospf interface to OSPF6 config and bound it to one of the two connected interfaces that the route is advertised correctly as local route. But this is not correct as this should work with just redistribute connected statement (OSPFv2 with ipv4 works just fine). Also these connected routes are not local to this OSPF area so we don’t want to advertise them as local manually.
Anyone using OSPF6 and redistribute connected? I would love to see your config and your thoughts on mine.
My current test lab is on FortiGate 300D with Firmware Version v5.4.4,build1117 (GA). My next step to upgrade firmware but I could not find anything OSPF6 related in release notes.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1737 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.