How to Troubleshoot OSPF Problems in cisco

Latest reply: Aug 24, 2015 09:19:25 1883 1 0 0

OSPF (Open Shortest Path First) is a commonly used routing protocol.

This resolution describes some steps one can take to troubleshoot OSPF problems.

When opening a case with Check Point Support for assistance in troubleshooting OSPF problems, please gather the following debug information.

OSPF Debug Logs
1.In Voyager, go to 'Configuration > Routing > Routing Options'.
2.Under the OSPF drop-down list, select "All" and click "Apply". This will generate ipsrd.log.* files under /var/log.
3.Collect the logs when OSPF errors occur. There might be multiple files created. Please send each one of them to us.
Packet Traces of OSPF Traffic
On the incoming and outgoing interfaces, use tcpdump or fw monitor to verify that OSPF packets are arriving at the device. An example tcpdump command that does this on interface eth-s3p1 is:

nokia[admin]# tcpdump -s 0 -i eth-s3p1 -w dump.dat ip proto ospf
To do something similar with fw monitor:

nokia[admin]# fw monitor -e 'accept ip_p=89;'
For more information about fw monitor, refer to sk30583.

Check Firewall Logs
It may be necessary to enable logging on all rules in order to see if the traffic is being dropped inappropriately.

Don't forgot to enable logging of the Security Gateway's interface-based anti-spoofing functionality, if it is being used.

Don't forget to enable logging of implicit rules.

Collect OSPF Routing Table Debug Using CLISH Commands
The OSPF Route Database can be dumped to a file easily using clish:

nokia[admin]# clish -c "show ospf database detailed" > ospfdb.txt
If you are running a version of IPSO prior to 3.6, use the following commands:

nokia[admin]# iclid

iclid> show version

iclid> show ospf database database-summary

iclid> show ospf neighbors

iclid> show ospf interfaces

iclid> show ospf errors brief

iclid> show ospf events

iclid> show ospf packets

iclid> show ospf
OSPINFO Script (Optional)
The following script will gather information about the state of the OSPF database and the OSPF router relationships, as perceived by the device. The resulting file can be compressed and provided to Check Point Support, if need be.

#! /bin/csh -f
# ospfinfo
# usage: ospfinfo
# Set the environment variables
if ( -f /var/etc/pm_cshrc ) then
  source /var/etc/pm_cshrc
set CURR_DATE=`date +%m.%d-%H%M`
set THISINFO=ospfinfo-`uname -n`-${CURR_DATE}.txt
echo "OSPF info taken " $CURR_DATE > $THISINFO
echo " >> $THISINFO
echo "================ ifconfig -a:" >> $THISINFO
ifconfig -a >> $THISINFO
echo " >> $THISINFO
echo "================ ospf database database-summary: " >> $THISINFO
iclid -n "show ospf database database-summary" >> $THISINFO
echo " >> $THISINFO
echo "================ ospf database router: " >> $THISINFO
iclid -n "show ospf database router" >> $THISINFO
echo " >> $THISINFO
echo "================ show ospf database area: ">> $THISINFO
iclid -n "show ospf database area" >> $THISINFO
echo " >> $THISINFO
echo "================ ospf database type: " >> $THISINFO
iclid -n "show ospf database type" >> $THISINFO
echo " >> $THISINFO
  • x
  • convention:

Created Aug 24, 2015 09:19:25 Helpful(0) Helpful(0)

good  good
  • x
  • convention:


You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits