SRX

Hello! Trying to configure ospf on srx100 device with routing-instance enabled, everything works fine between devices without routing instance.

show routing-instances 
cifra1 {
    instance-type virtual-router;
    interface st0.0;
    interface st0.4;
    interface st0.8;
    interface vlan.1;
    routing-options {                   
        interface-routes {              
            rib-group inet cifra1;      
        }                               
        static {                        
            route 0.0.0.0/0 next-hop 212.152.36.217;
            route 172.17.0.0/16 next-hop 192.168.9.3;
            route 192.168.10.0/24 next-hop st0.8;
            route 192.168.11.0/24 next-hop st0.4;
        }                               
    }                                   
    
    protocols {                         
        ospf {                          
            rib-group cifra1;           
            area 0.0.0.0 {              
                interface st0.4;        
                interface st0.8;        
                interface vlan.1;                    
            }                           
        }                               
    }                                   
} 

All protocols are allowed in trust zone.

But

run show ospf neighbor instance cifra1  

is empty.

run show ospf interface instance cifra1   
Interface           State   Area            DR ID           BDR ID          Nbrs
st0.4               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            0
st0.8               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            0
vlan.1              DR      0.0.0.0         10.12.31.1      0.0.0.0            0
vlan.1              DR      0.0.0.0         10.12.31.1      0.0.0.0            0

Any ideas why?

Hello ,

Can you try :

> show ospf neighbor instance all

If that fetch you some details . Also please provide the JUNOS version that you are running .

Thank you for your reply, here it is:

show ospf neighbor instance all 
Instance: cifra1

Btw, adjacent srx device shows (it hast routing instances:

show ospf neighbor    
Address          Interface              State     ID               Pri  Dead
212.152.36.218   st0.2                  Init      192.168.2.254    128    35

Hello ,

Thanks for the output . As per the output the OSPF is stuck in init . So kindly check :

1) Do we have IP on the st0 interfaces

2) Are the interfaces in a zone and protocols OSPF allowed ?

Can you share the configuration from the devices .

1. No there is no IP's on st0 interfaces

2. Yes, they are in trust zone.

device with routing instance: http://pastebin.com/VQZLshnd

device without routing instance: http://pastebin.com/eMdJ1KBQ

> Can you share the "show route" for the OSPF neighbors?

ofc: here it is:

device with routing instance: http://pastebin.com/XCX1RKYi

device without: 

inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0          *[Static/5] 1w0d 22:14:12
                    > to 84.204.167.41 via fe-0/0/0.0
84.204.167.40/29   *[Direct/0] 1w0d 22:14:12
                    > via fe-0/0/0.0
84.204.167.45/32   *[Local/0] 1w6d 14:34:50
                      Local via fe-0/0/0.0
172.17.20.0/24     *[Static/5] 1w0d 22:22:06
                    > via st0.2
192.168.10.0/24    *[Direct/0] 1w4d 12:50:58
                    > via vlan.0
192.168.10.1/32    *[Local/0] 1w6d 14:34:59
                      Local via vlan.0
192.168.11.0/24    *[Static/5] 1d 20:26:01
                    > via st0.1
192.168.70.0/24    *[Static/5] 1w0d 22:22:06
                    > via st0.2
224.0.0.5/32       *[OSPF/10] 01:49:41, metric 1
                      MultiRecv
                                        
inet6.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
                                        
fe80::/64          *[Direct/0] 1d 16:53:33
                    > via st0.0         
fe80::3e61:40f:fce2:540/128             
                   *[Local/0] 1w6d 14:34:59
                      Local via st0.0  

YOu need IP address on St0 interfaces to run OSPF or any dynamic routing protocols

Hello ,

You need IP adress in ST interface to run any dynamic protocols . Can you configure the same and let us know the outcome .

Can you share the "show route" for the OSPF neighbors?