hopp
10-21-2005, 10:32 AM
After several months of perplexing 1/2 hr ospf outages every tima a wrap was restarted I found this tidbit in the quagga documentation.
http://www.quagga.net/docs/docs-info.php#OSPF-interface
Quote:
Note that OSPF MD5 authentication requires that time never go backwards (correct time is not important, only that it never goes backwards), even across resets, if ospfd is to be able to promptly reestabish adjacencies with its neighbours after restarts/reboots. The host should have system time be set at boot from an external source (eg battery backed clock, NTP, etc.) or else the system clock should be periodically saved to non-volative storage and restored at boot if MD5 authentication is to be expected to work reliably.
Since wraps were always going back to Jan 2000 we would drop routes till they expired from the database.
Once we switched to authentication-key the half hour problem ceased.
Since then we've set the hello-interval to 5 and dead-interval to 20 which has really improved our convergence times.
On a couple dozen machine ospf network we converge within 62 seconds from a reboot and 11 seconds from an ospfd restart.
BTW Thanks for what now appears to be a stable version of ospfd.
http://www.quagga.net/docs/docs-info.php#OSPF-interface
Quote:
Note that OSPF MD5 authentication requires that time never go backwards (correct time is not important, only that it never goes backwards), even across resets, if ospfd is to be able to promptly reestabish adjacencies with its neighbours after restarts/reboots. The host should have system time be set at boot from an external source (eg battery backed clock, NTP, etc.) or else the system clock should be periodically saved to non-volative storage and restored at boot if MD5 authentication is to be expected to work reliably.
Since wraps were always going back to Jan 2000 we would drop routes till they expired from the database.
Once we switched to authentication-key the half hour problem ceased.
Since then we've set the hello-interval to 5 and dead-interval to 20 which has really improved our convergence times.
On a couple dozen machine ospf network we converge within 62 seconds from a reboot and 11 seconds from an ospfd restart.
BTW Thanks for what now appears to be a stable version of ospfd.