LSA Types
1. Router LSA
routers within the area flood type 1 lsa's containing directly connected links
Link Identification:
1. IP Prefix
2. Link Type:
Point To Point
Link ID: Neighbor RID
Transit Network
Link ID: IP Address of DR
Stub Network
Link ID: IP Network
Virtual Link
Link ID: Neighbor RID
these lsa's always stay within an area
2. Network LSA
created for each multi-access network
for broadcast/non-broadcast the DR generates these lsa's
includes connected routers to the multi-access network, the DR, prefix & subnet mask
3. Summary LSA
created by ABR
flooded into other areas
4. Summary ASBR LSA
ABR generates
includes RID of the ASBR in the link state ID field
5. Autonomous System External LSA
generated by the ASBR
contains information about external prefixes redistributed into OSPF
6. Multicast OSPF LSA
not used anymore
not supported by Cisco
7. Not So Stubby Area LSA
in NSSA areas Type 5 LSA's are not allowed. Type 7 LSA's are created to get around this to show redestributed prefixes
Created by ABR
8. External Attribute LSA For BGP
Commands:
sh ip ospf data
shows OSPF LSDB
(under router config) #redistribute connected subnets
redistribute subnets on a router without the network command
(under router config) #area <0-65000> nssa
configure not so stubby area
(under router config) #redistribute <rip,eigrp,bgp> <as #> <subnets>
"subnets" keyword included for addresses that are not classful
redistributes routes from other routing protocols into OSPF
Summarization
impossible to summarize within an area
must configure summarization on a ABR or ASBR
OSPF can only summarize LSA Type 3 and 5
must configure summarization manually
Nothing will change in other areas if an interarea summarization is configured
summary route will only be advertised if you have at least one subnet that is within the summary range
if links to all subnets in the summary fail then the summary is withdrawn
summary route will have the cost of the subnet with the lowest cost that falls within the summary range
ABR that creates a summary route will create a null0 interface to prevent loops
OSPF is classless so any subnet mask can be used for prefixes
Command to summarize on ABR/ASBR:
(under router config) #area <0-65000> range <ip address subnet> <subnet mask>
External Summarization (Type 5 LSA'S)
use "summary address <ip address/mask>" (under router config)
configure on ASBR
OSPF Special Area Types
Stub Area
No ASBR's
No Type 5 external LSA's
must have at least one ABR in area
all routers in area must be configured as stub
Command:
(router config) #area <1-65000> stub
Totally Stub Area
No ASBR's allowed
No Type 3 Summary LSA
No Type 5 external LSA
must have at least one ABR in area
all routers in area must be configured as stub
Commands:
(router config) #area <1-65000> stub no-summary
NSSA
ASBR's allowed
Type 7 LSA's replace Type 5
No Type 5 external LSA's
Default routes must be installed manually on ABR
Commands:
(router-config) #area <1-65000> nssa default-information-originate
Commands:
(router config) #area <1-65000> nssa
Totally Not So Stubby Area
ASBR's allowed
No Type 3 Summary LSA
No Type 5 External LSA
Commands:
(router config) #area <1-65000> nssa no-summary
Special area types are used to insert default routes into an area and replace Type 3 Summary LSA's and Type 5 External LSA's
keeps LSA flooding to a minimum
Smaller LSDB
Less SPF calculations
Smaller routing table
configuring an area as stub blocks ALL Type 5 External LSA's
No ASBR's allowed in stub area
to reach other networks in other areas a default route is setup
OSPF Authentication
Methods:
Plain Text
MD5
Interface Authentication: Plain Text
(router-interface) #ip ospf authentication
(router-interface) #ip ospf authentication-key <key>
Interface Authentication: MD5
(router-interface) #ip ospf message-digest-key <key#> md5 <password>
(router-interface) #ip ospf authentication message-digest
Area Authentication:
Plain Text
(router-config) #area <0-65000> authentication
MD5
(router-config) #area <0-65000> authentication message-digest
Packet Debugging Codes:
Aut:0 = no authentication
Aut:1 = plaintext authentication
Aut:2 = MD5