f5 OSPF+Routing+Module.ppt

1、ZebOS and OSPFConsulting Perspective,Presented by: Glen TownsendConsultant II214-755-9574G.TownsendF,Agenda,What are we trying to accomplish? What is OSPF What is RHI? Deployment Overview Core Rotuer Configuration LTM OSPF Configuration Verify LTM Licensing Enabling OSPF routing protocol VTYSH ZebOs

2、 configuration on LTM using VTYSH Verify OSPF Peer Connectivity Why isnt it working? Trouble Shooting,What are we trying to accomplish?,Configure a pair of LTMs in Area 0 to advertise routes utilizing OSPF to an upstream router.,The Open Shortest Path First (OSPF) protocol, defined in RFC 2328 , is

3、an Interior Gateway Protocol used to distribute routing information within a single Autonomous System. The OSPF protocol is a link-state, hierarchical interior gateway protocol (IGP) for network routing. Dijkstras algorithm is used to calculate the shortest path tree. It uses cost as its routing met

4、ric. A link state database is constructed of the network topology which is identical on all routers in the area.,What is OSPF?,Core Router Configuration,The Seattle DC router will be configured to point to the self IP address of each LTM and define a OSPF area of 0,router ospf 10 network 1.0.0.0 0.0

5、.0.255 area 0,This specifies to the core router the shared network of the OSPF neighbors and the area.,LTM OSPF Configuration,Verify LTM OSPF Routing Module Licensing Enabling OSPF routing protocol VTYSH ZebOs configuration on LTM using VTYSH Verify OSPF Peer Connectivity Trouble shooting OSPF Peer

6、Connectivity Why isnt it working?,Verify LTM OSPF Routing Module Licensing,From the CLI, run the command “b version | more” and verify that “OSPF Routing Module” is an Enabled Feature,Enabling OSPF Routing Module,From the CLI, run the command “zebos enable OSPF” to enable and start the OSPF routing

7、module.,VTYSH,The /config/ZebOS.conf is the file that contains the ZebOS configuration To enter the ZebOS router configuration mode: VTYSH is a router like command interface to modify and verify the ZebOs configuration. To Start the VTYSH application, from the CLI run the command: vtysh Next change

8、into the router enable mode by running the enable command To View the configuration use the write term command,Deployment Overview,f5-lab# configure terminal f5-lab(config)# log file /var/log/zebos/zebos.log f5-lab(config)# router ospf 10 f5-lab(config-router)# ospf router-id 1.0.0.11 f5-lab(config-

9、router)# redistribute kernel route-map ext-out f5-lab(config-router)# network 1.0.0.0 0.0.0.255 area 0 f5-lab(config-router)# exit f5-lab(config)# access-list kernel-out permit 1.2.0.0/24 f5-lab(config)# route-map ext-out permit 10 f5-lab(config-route-map)# match ip address kernel-out,The Confiure T

10、erminal command takes us into the edit mode Specifies where we will log zebos alerts Defines the routing protocol and the LTMs OSPF process ID Router ID for the LTM, usually the self ip address of the LTM Pulls the UNIX kernel routes and redistributes them into a route map ext-out Sets the common ne

11、twork and OSPF area between the LTM and the router Defines the access list “kernel-out” and sets the network of 1.2.0.0/24 as the outbound advertised route Creates processing priority of a route map called ext-out Specifies the access list kernel-out that specifies the routes that will be advertised

12、,Remove ZebOS.conf from config sync,save.1011.file = /config/ZebOS.conf save.1011.backup = yes save.1011.local = yes,Each LTM of a pair will require a LTM specific router-id. To remove the ZebOS.conf from the config sync list, modify the /usr/libdata/configsync/cs.dat file and add the following line

13、s:,LTM ZebOs Configuration,*Note: Only changes from previous slide is reflected.,router ospf 10 network 1.0.0.0 0.0.0.255 area 0 !,LTM A* router ospf 10 ospf router-id 1.0.0.11 redistribute kernel route-map ext-out network 1.0.0.0 0.0.0.255 area 0 access-list kernel-out permit 1.2.0.0/24 route-map e

14、xt-out permit 10 match ip address kernel-out,LTM B* router ospf 10 ospf router-id 1.0.0.12 redistribute kernel route-map ext-out network 1.0.0.0 0.0.0.255 area 0 access-list kernel-out permit 1.2.0.0/24 route-map ext-out permit 10 match ip address kernel-out,Verifiy OSPF Communication,From the CLI r

15、un the command: sh ip ospf neighbors Verify that the OSPF state is Full,sh ip ospf neighbor OSPF process 10: Neighbor ID Pri State Dead Time Address Interface RXmtL RqstL DBsmL 1.0.0.240 20 Full/DR 00:00:38 1.0.0.240 external:1.0.0.11 0 0 0,Create a Virtual Server in the 1.2.0.x network,Create a sta

16、ndard virtual server in the 1.2.0.x network on all 4 LTMs,From the core router verify that a OSPF route is in the route table by running the sh ip route ospf command.,sh ip route ospf 1.2.0.0/32 is subnetted, 1 subnets O 1.2.0.56 110/65 via 1.0.0.11, 00:08:58, Ethernet0,Why isnt a OSPF router advers

17、ised to the core routers route table?,Route advertisement must be enabled on the Virtual server address.,Choose the Virtual server IP address, check the Route Advertisement box and choose Update,Verify OSPF Routes on Core,After enabling route advertisement on all LTMs for the 1.2.0.56/32, routes fro

18、m the active LTM will be reflected in the route table.,sh ip route ospf 1.2.0.0/32 is subnetted, 2 subnets O E2 1.2.0.56 110/20 via 1.0.0.11, 00:08:58, Ethernet0 O E2 1.2.0.148 110/20 via 1.0.0.11, 00:08:58, Ethernet0 2.0.0.0/32 is subnetted, 1 subnets O 2.0.0.2 110/65 via 192.168.254.2, 00:08:58, S

19、erial0,Trouble shooting OSPF,OSPF will not stop advertising the routes unless the monitor fails on the pool, disabling all the nodes or the virtual will not stop OSPF from advertising the route. If OSPF is not connecting to a peer, run the sh ip ospf neighbor command to verify the State. One cause o

20、f the router in a ExStart/DR state is mismatch MTU between the routers. sh ip ospf neighbor OSPF process 10: Neighbor ID Pri State Dead Time Address Interface RXmtL RqstL DBsmL 1.0.0.240 20 ExStart/DR 00:00:33 1.0.0.240 external:1.0.0.11 0 0 0 On the LTM run sh ip ospf interface command and check the MTU size and verify the MT