OSPF routing error

[melnikov]

Hello!
can you help me with logs errors of devices?

I set up OSPF in PAlo Alto this way:
Area 0 on tunnel interface and Area 28 on interface ethernet Palo Alto.
Neighbors succeeds, counters are all true. I can send a screenshot if it is needed.

At the moment there is an error each 3 minutes on both devices (Palo Alto and Cisco).
This error means that the neighbor is down/up.

1,2020/09/17 12:02:17,012801152213,SYSTEM,routing,0,2020/09/17 12:02:17,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26131593,0x0,0,0,0,0,,

1,2020/09/17 11:59:08,012801152213,SYSTEM,routing,0,2020/09/17 11:59:08,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26130967,0x0,0,0,0,0,,

1,2020/09/17 11:55:59,012801152213,SYSTEM,routing,0,2020/09/17 11:55:59,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26130350,0x0,0,0,0,0,,

1,2020/09/17 11:52:47,012801152213,SYSTEM,routing,0,2020/09/17 11:52:47,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26129725,0x0,0,0,0,0,,

1,2020/09/17 11:49:35,012801152213,SYSTEM,routing,0,2020/09/17 11:49:35,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26129100,0x0,0,0,0,0,,

1,2020/09/17 11:46:27,012801152213,SYSTEM,routing,0,2020/09/17 11:46:27,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26128475,0x0,0,0,0,0,,

1,2020/09/17 11:43:17,012801152213,SYSTEM,routing,0,2020/09/17 11:43:17,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26127850,0x0,0,0,0,0,,

1,2020/09/17 11:40:07,012801152213,SYSTEM,routing,0,2020/09/17 11:40:07,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26127239,0x0,0,0,0,0,,

1,2020/09/17 11:36:55,012801152213,SYSTEM,routing,0,2020/09/17 11:36:55,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26126606,0x0,0,0,0,0,,

1,2020/09/17 11:33:46,012801152213,SYSTEM,routing,0,2020/09/17 11:33:46,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26125989,0x0,0,0,0,0,,

1,2020/09/17 11:30:35,012801152213,SYSTEM,routing,0,2020/09/17 11:30:35,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26125364,0x0,0,0,0,0,,

1,2020/09/17 11:27:23,012801152213,SYSTEM,routing,0,2020/09/17 11:27:23,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26124739,0x0,0,0,0,0,,

1,2020/09/17 11:24:15,012801152213,SYSTEM,routing,0,2020/09/17 11:24:15,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26124124,0x0,0,0,0,0,,

1,2020/09/17 11:21:04,012801152213,SYSTEM,routing,0,2020/09/17 11:21:04,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26123498,0x0,0,0,0,0,,

1,2020/09/17 11:17:53,012801152213,SYSTEM,routing,0,2020/09/17 11:17:53,,routed-OSPF-neighbor-down,default,0,0,general,high,"OSPF adjacency with neighbor has gone down. interface tunnel.201, neighbor router ID 10.179.100.1, neighbor IP address 10.220.0.9.",26122873,0x0,0,0,0,0,,

The tunnel is set between Palo Alto and Cisco. It works normal because there is nothing logs about.
You can see below the logs from Cisco gateway.

Sep 17 10:43:58.832: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from DOWN to DOWN, Neighbor Down: Ignore timer expired

Sep 17 10:46:11.440: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from EXSTART to DOWN, Neighbor Down: Too many retransmissions

Sep 17 10:47:11.440: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from DOWN to DOWN, Neighbor Down: Ignore timer expired

Sep 17 10:49:20.340: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from EXSTART to DOWN, Neighbor Down: Too many retransmissions

Sep 17 10:50:20.339: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from DOWN to DOWN, Neighbor Down: Ignore timer expired

Sep 17 10:52:31.563: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from EXSTART to DOWN, Neighbor Down: Too many retransmissions

Sep 17 10:53:31.563: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from DOWN to DOWN, Neighbor Down: Ignore timer expired

Sep 17 10:55:39.478: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from EXSTART to DOWN, Neighbor Down: Too many retransmissions

Sep 17 10:56:39.478: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from DOWN to DOWN, Neighbor Down: Ignore timer expired

Sep 17 10:58:50.970: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from EXSTART to DOWN, Neighbor Down: Too many retransmissions

Sep 17 10:59:50.970: %OSPF-5-ADJCHG: Process 4, Nbr 172.28.0.245 on Tunnel128 from DOWN to DOWN, Neighbor Down: Ignore timer expired

Sep 17 11:01:38.205: %OSPF-4-NET_TYPE_MISMATCH: Received Hello from 172.28.0.245 on Tunnel128 indicating a  potential

[SureshReddyM · Accepted solution]

Hi,

As per logs these are might be possible causes of issue.

• There is packet loss on the link, which causes the OSPF packets to be dropped.
  
  
• Theip ospf mtu-ignorecommand has been configured. Refer to the IP OSPF MTU-Ignore CommandCisco document for more information.
  
  
• There is an issue that is related to the Maximum Transmission Unit (MTU) and the size of the OSPF packets. Refer to the OSPF, MTU and LSA Packing Tech Note Cisco document for more information.

Best Regards,

Suresh Reddy

[Abdul-Fattah]

Your Log is not completed, what would be after 

NET_TYPE_MISMATCH: Received Hello from 172.28.0.245 on Tunnel128 indicating a  potential

[MP18]

@melnikov 

Seems you have Network type mismatch between the two neighbours.

Make sure NEtwork type is same on both PA and Cisco.

Below are Network types Point to Point, Loopback, Broadcast etc

Regards

[melnikov]

Hi,

I used debug on cisco device. then I used to command ip ospf mtu-ignore. It helped.

Thank you.