Summary ASB Type4 LSA Part-2 (NSSA)

As we continue our series on Summary ASB LSA 4 we look at LSA4 in NSSA(Not-s0-Stubby-Area).

we all know that the stubby area allows only Router LSA( type1 LSA), network LSA(type2 LSA) and the Summary LSA ( type3 LSA) , the only difference in NSSA is, it allows and generates type 7 LSA.

We saw why we need LSA4 , who generates and why it generated etc ..in the last post, this post involves what happens when we have NSSA AREA.

Here is our scenario.

 

Here are the configurations .  I configure OSPF in the interfaces.

router ospf 1
area 1 nssa
IOU1#show run int et
IOU1#show run int ethernet 0/0
Building configuration…
Current configuration : 84 bytes
interface Ethernet0/0
ip address 10.10.10.1 255.255.255.0
ip ospf 1 area 1
end

IOU2#show run | s ospf
ip ospf 1 area 1
ip ospf 1 area 0
router ospf 1
area 1 nssa
IOU2#show run int et 0/0
Building configuration…
Current configuration : 84 bytes
interface Ethernet0/0
ip address 10.10.10.2 255.255.255.0
ip ospf 1 area 1
end
IOU2#show run int et 0/1
Building configuration…
Current configuration : 84 bytes
interface Ethernet0/1
ip address 20.20.20.1 255.255.255.0
ip ospf 1 area 0
end

IOU3#Show run | s ospf
ip ospf 1 area 0
router ospf 1
IOU3#show run int et 0/1
Building configuration…
Current configuration : 84 bytes
!
interface Ethernet0/1
ip address 20.20.20.2 255.255.255.0
ip ospf 1 area 0
end

As we can see there is nothing redistributed or injected in IOU1 so it doesnt generate LSA7.

IOU1#show ip ospf database | b External
IOU1#

  As per the configuration,diagram IOU2 is the NSSA ABR So can we expect the IOU2 to be ASBR for the rest of the network?

Yes its the ASBR for the rest of the network since the NSSA ABR always translates the type 7 to type 5 unless the P-bit is cleared or unless the other NSSA ABR in multiple ABR scenarios, translates type 7 to type 5 in virtue of highest IP address.

we will come to know whats about the P – bit a bit later in the NSSA FA series .

There is no LSA type 7 from IOU1 as we saw above!!! will IOU2 still be the ASBR for the rest of the network?

Absolutely , Though there is no type 7 LSA from IOU1 , since its NSSA , the NSSA ABR IOU2 takes the role of the ASBR and sets the E bit to its neighbors indicating thats the ASBR.

• Here is the packet snippet from IOU2 to IOU3. we can see that IOU2 sets the E bit in router LSA as well as the B-bit indicating that its the ABR too.

 

we did see in the previous posts that with in the same area if we have ASBR we don’t need the type4 LSA because it reaches through the router LSA so IOU3 doesnt need one .

“what happens now when we connect another router to IOU3 in some other area will that router see an type 4 LSA ” ?

Lets do that and see what happens ..

 

Modified configuration of IOU3 since we added IOU4 .

IOU3#show run int et 0/0
Building configuration…
Current configuration : 84 bytes
!interface Ethernet0/0
ip address 30.30.30.1 255.255.255.0
ip ospf 1 area 2
end
IOU3#

IOU4#show run | s ospf
ip ospf 1 area 2
router ospf 1
IOU4#show run int et 0/0
Building configuration…
Current configuration : 84 bytes
interface Ethernet0/0
ip address 30.30.30.2 255.255.255.0
ip ospf 1 area 2
end

“After the neighborship is up , we can see type 4 LSA generated by IOU3 with the link ID as IOU2 since IOU is the ASBR ( converts type 7 to type5).”

IOU4#show ip ospf database | b Summary ASB
Summary ASB Link States (Area 2)

Link ID          ADV Router     Age          Seq#         Checksum
20.20.20.1     20.20.20.2        443             0x80000001   0x0015A1
IOU4#

Conclusion:

1. Though we don’t redistribute anything or we dont see any external network injected or generated in  NSSA , the NSSA ABR will take the role as the ASBR for the rest of the network and the ABR will generate the type4 LSA for the other networks.

Next in series will be the impact of FA in NSSA , Does FA modify external path selection ?what happens if we suppress FA ? etc..how does the ABR choose the best path to the external network in NSSA?

Tune in ..:)

Thanks and regards,
Avinash R

All about Summary ASBR LSA4

Why do we need LSA4? Who generates it? Does it get generated with in Area 0? Do you always need LSA4? Can you reach the external network without LSA4?

what happens if we have NSSA and what if it doesn’t generate any LSA7 ? Do we still have LSA4?
Here are the answers..

My first scenario would be the following:

As you can see IOU1 and IOU2 are in AREA 1 and IOU2 and IOU3 are in AREA 0 and I am redistributing  only Loopback1 in IOU1  instead of redistributing all the connected interfaces.

 

 

Configurations :

I have configured the OSPF process and the area in the interfaces.

IOU1:
router ospf 1
redistribute connected subnets route-map test

IOU1#show run int lo 1
Building configuration…

Current configuration : 61 bytes
!
interface Loopback1
ip address 1.1.1.1 255.255.255.0
end

IOU1#show route-map test
route-map test, permit, sequence 10
Match clauses:
ip address prefix-lists: test
Set clauses:
Policy routing matches: 0 packets, 0 bytes

IOU1#show ip prefix-list test
ip prefix-list test: 1 entries
seq 5 permit 1.1.1.0/24
IOU1#show run int ethernet 0/0
interface Ethernet0/0
ip address 20.20.20.1 255.255.255.0
ip ospf 1 area 1
end

IOU2:
show run int ethernet 0/0
interface Ethernet0/0
ip address 20.20.20.2 255.255.255.0
ip ospf 1 area 1
end
show run int ethernet 0/1
interface Ethernet0/1
ip address 10.10.10.1 255.255.255.0
ip ospf 1 area 0
end

As you can see IOU 1 is generating LSA 5 and you can see those LSA’s in IOU2 as well as IOU3

IOU1#show ip ospf database | B External
Type-5 AS External Link States

Link ID  ADV Router    Age       Seq#              Checksum Tag
1.1.1.0     20.20.20.1        1517    0x80000002       0x00D985 0
IOU2#show ip ospf database | B External
Type-5 AS External Link States
Link ID ADV Router Age   Seq#        Checksum Tag
1.1.1.0 20.20.20.1    1680 0x80000002   0x00D985 0

IOU3#show ip ospf database | B External
Type-5 AS External Link States

Link ID ADV Router Age      Seq#        Checksum Tag
1.1.1.0 20.20.20.1     1720 0x80000002 0x00D985 0

Now how will IOU2 and IOU3 know how to reach the ASBR and who is the ASBR? Here it is.

Since IOU1 redistributed a Loopback, it is the ASBR and thus it generated LSA5 . Hence when it sends the ROUTER LSA , the LSA type 1 it sets the E bit and sends indicating external capability that the advertising router is a ASBR hence by virtue of that IOU2 will come to know that IOU1 is the ASBR .

And here is the packet capture snippet of router LSA1 send by IOU1.

 

As you can see that when IOU1 (20.20.20.1) sends the router LSA it sets the E bit and sends which indicates that it is the ASBR .

There we go, we got the answer on how IOU2 can reach the external prefix ?

since the router IOU2 sees that IOU1 is the ASBR through Router LSA it doesn’t need LSA type4 to reach the external prefix.
We can clearly see the ospf database that there is no summary ASBR for area 1.

It is only for AREA 0.

IOU2#show ip ospf database asbr-summary
OSPF Router with ID (20.20.20.2) (Process ID 1)
Summary ASB Link States (Area 0)
LS age: 1113
Options: (No TOS-capability, DC, Upward)
LS Type: Summary Links(AS Boundary Router)
Link State ID: 20.20.20.1 (AS Boundary Router address)
Advertising Router: 20.20.20.2
LS Seq Number: 80000006
Checksum: 0xBA6
Length: 28
Network Mask: /0
MTID: 0 Metric: 10

Now how do IOU3 comes to know the existence of ASBR in the network so that it can reach the external prefix and why should it know the ASBR to reach 1.1.1.1?
The answer is:

Whenever an external LSA is generated by the the ASBR unless and until its is NSSA ASBR the Forwarding address is always set to 0.0.0.0 or when FA is suppressed or when we redistribute static routes and advertise the next-hop’s subnet, so when IOU3 receives the external LSA it sees the FA as 0.0.0.0 and it should know where it needs to forward the packet to reach 1.1.1.1 so it should know the ASBR thus summary ASB comes into picture.

IOU3#show ip ospf database external
OSPF Router with ID (10.10.10.2) (Process ID 1)
Type-5 AS External Link States

Routing Bit Set on this LSA in topology Base with MTID 0
LS age: 375
Options: (No TOS-capability, DC, Upward)
LS Type: AS External Link
Link State ID: 1.1.1.0 (External Network Number )
Advertising Router: 20.20.20.1
LS Seq Number: 80000005
Checksum: 0xD388
Length: 36
Network Mask: /24
Metric Type: 2 (Larger than any link state path)
MTID: 0
Metric: 20
Forward Address: 0.0.0.0
External Route Tag: 0

Since it is the job of a backbone area to always generate summary ASB (LSA4) when there is ASBR in the network, the IOU2 generates the summary ASB LSA4 with the advertising router id as itself (20.20.20.2) and the Link ID as the ASBR which is 20.20.20.1 as stated above.

Here is the output from IOU3.

IOU3#show ip ospf database asbr-summary
OSPF Router with ID (10.10.10.2) (Process ID 1)
Summary ASB Link States (Area 0)

Routing Bit Set on this LSA in topology Base with MTID 0
LS age: 1501
Options: (No TOS-capability, DC, Upward)
LS Type: Summary Links(AS Boundary Router)
Link State ID: 20.20.20.1 (AS Boundary Router address)
Advertising Router: 20.20.20.2
LS Seq Number: 80000006
Checksum: 0xBA6
Length: 28
Network Mask: /0
MTID: 0 Metric: 10
So the conclusion is , the summary ASB LSA4 is always generated by the ABR and the existence of an ASBR in a network is indicated or identified by the E bit set in the router LSA.  so what happens when AREA 0 is the ABR as well as the ASBR ? Yes still you dont need LSA4 inside AREA 0 since through router lsa we will come to know about ASBR.

What happens with LSA4 in NSSA?

Tune into i love networking for the next series of LSA4 in NSSA..