Strange Path Selection in WatchGuard OSPF The 2019 Stack Overflow Developer Survey Results Are...

Single author papers against my advisor's will?

Didn't get enough time to take a Coding Test - what to do now?

Is this wall load bearing? Blueprints and photos attached

How do spell lists change if the party levels up without taking a long rest?

Is every episode of "Where are my Pants?" identical?

"... to apply for a visa" or "... and applied for a visa"?

What happens to a Warlock's expended Spell Slots when they gain a Level?

Huge performance difference of the command find with and without using %M option to show permissions

Match Roman Numerals

What to do when moving next to a bird sanctuary with a loosely-domesticated cat?

How do I design a circuit to convert a 100 mV and 50 Hz sine wave to a square wave?

How to read αἱμύλιος or when to aspirate

Is there a writing software that you can sort scenes like slides in PowerPoint?

For what reasons would an animal species NOT cross a *horizontal* land bridge?

Define a list range inside a list

How to politely respond to generic emails requesting a PhD/job in my lab? Without wasting too much time

Can I visit the Trinity College (Cambridge) library and see some of their rare books

Does Parliament need to approve the new Brexit delay to 31 October 2019?

One-dimensional Japanese puzzle

Variable with quotation marks "$()"

What aspect of planet Earth must be changed to prevent the industrial revolution?

The following signatures were invalid: EXPKEYSIG 1397BC53640DB551

Why doesn't a hydraulic lever violate conservation of energy?

What force causes entropy to increase?



Strange Path Selection in WatchGuard OSPF



The 2019 Stack Overflow Developer Survey Results Are In
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!OSPF: quagga and HP ProCurve not talkingwhen choose OSPF and when RIPlinux route 2nd internal networkcustom route not working on windowsHow to route between 2 networks with a server with 2 network cards?redistribution OSPF RIP of directly connected networksRouting Issue - can't ping gateway from other routers in full meshOSPF and routing by subnet prefixConnecting two clients openvpnHow can I limit OSPF route visibility between different areas?





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I have the same result.



Below I have drawn the network design. Generally everything that is behind CPEs I can't have access. As well I have limited configuration options in networks 10 and 11.



Simplified network Diagram



As you may see on the figure, trace from network 2 to 11 is going through R1. So basically the WG R2 has the following routing table:



Destination     Gateway         Genmask         Flags   Metric    Interface 
192.168.2.0 0.0.0.0 255.255.255.0 U 0 vlan10
10.0.0.0 172.17.12.1 255.255.255.255 UGH 20 vlan15
172.17.12.0 0.0.0.0 255.255.255.248 U 0 vlan15
172.17.22.0 0.0.0.0 255.255.255.248 U 0 vlan400
192.168.1.0 172.17.12.1 255.255.255.0 UG 20 vlan15
192.168.11.0 172.17.12.1 255.255.255.0 UG 20 vlan15
192.168.10.0 172.17.12.1 255.255.255.0 UG 20 vlan15


From here I can't understand why my router uses this strange path to 10.0.0.0 and 192.168.10-11.0 networks.



If we check the OSPF results from the same router, we see the following.



============ OSPF network routing table ============
N 172.17.11.0/29 [20] area: 0.0.0.0
via 172.17.12.1, vlan15
N 172.17.22.0/29 [10] area: 0.0.0.0
directly attached to vlan400
N 172.17.12.0/29 [10] area: 0.0.0.0
directly attached to vlan15

============ OSPF router routing table =============
R 172.17.11.1 [20] area: 0.0.0.0, ASBR
via 172.17.12.1, vlan15
R 172.17.22.1 [10] area: 0.0.0.0, ASBR
via 172.17.22.1, vlan400
R 192.168.1.1 [10] area: 0.0.0.0, ASBR
via 172.17.12.1, vlan15

============ OSPF external routing table ===========
N E1 100.0.0.0/32 [2020] tag: 6837
via 172.17.12.1, vlan15
N E2 192.168.1.0/24 [10/20] tag: 0
via 172.17.12.1, vlan15
N E1 192.168.10.0/24 [2020] tag: 6837
via 172.17.12.1, vlan15
N E1 192.168.11.0/24 [2020] tag: 6837
via 172.17.12.1, vlan15


Could someone turn me into the right direction? It might be a minor thing I could miss, but I can't understand why my WG R2 decides that path through R1 is better than directly via CPE2. It is clear for networks 172.17.11.0/29 and 192.168.1.0, but not for 10th and 11th.



Moreover when I use auto-cost reference-bandwidth 1000 then the R1 and R2 swap the roles. I.e. R2 sends everything correctly over CPE2, but R1 selects R2 for all destinations behind CPEs.









share





























    0















    I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I have the same result.



    Below I have drawn the network design. Generally everything that is behind CPEs I can't have access. As well I have limited configuration options in networks 10 and 11.



    Simplified network Diagram



    As you may see on the figure, trace from network 2 to 11 is going through R1. So basically the WG R2 has the following routing table:



    Destination     Gateway         Genmask         Flags   Metric    Interface 
    192.168.2.0 0.0.0.0 255.255.255.0 U 0 vlan10
    10.0.0.0 172.17.12.1 255.255.255.255 UGH 20 vlan15
    172.17.12.0 0.0.0.0 255.255.255.248 U 0 vlan15
    172.17.22.0 0.0.0.0 255.255.255.248 U 0 vlan400
    192.168.1.0 172.17.12.1 255.255.255.0 UG 20 vlan15
    192.168.11.0 172.17.12.1 255.255.255.0 UG 20 vlan15
    192.168.10.0 172.17.12.1 255.255.255.0 UG 20 vlan15


    From here I can't understand why my router uses this strange path to 10.0.0.0 and 192.168.10-11.0 networks.



    If we check the OSPF results from the same router, we see the following.



    ============ OSPF network routing table ============
    N 172.17.11.0/29 [20] area: 0.0.0.0
    via 172.17.12.1, vlan15
    N 172.17.22.0/29 [10] area: 0.0.0.0
    directly attached to vlan400
    N 172.17.12.0/29 [10] area: 0.0.0.0
    directly attached to vlan15

    ============ OSPF router routing table =============
    R 172.17.11.1 [20] area: 0.0.0.0, ASBR
    via 172.17.12.1, vlan15
    R 172.17.22.1 [10] area: 0.0.0.0, ASBR
    via 172.17.22.1, vlan400
    R 192.168.1.1 [10] area: 0.0.0.0, ASBR
    via 172.17.12.1, vlan15

    ============ OSPF external routing table ===========
    N E1 100.0.0.0/32 [2020] tag: 6837
    via 172.17.12.1, vlan15
    N E2 192.168.1.0/24 [10/20] tag: 0
    via 172.17.12.1, vlan15
    N E1 192.168.10.0/24 [2020] tag: 6837
    via 172.17.12.1, vlan15
    N E1 192.168.11.0/24 [2020] tag: 6837
    via 172.17.12.1, vlan15


    Could someone turn me into the right direction? It might be a minor thing I could miss, but I can't understand why my WG R2 decides that path through R1 is better than directly via CPE2. It is clear for networks 172.17.11.0/29 and 192.168.1.0, but not for 10th and 11th.



    Moreover when I use auto-cost reference-bandwidth 1000 then the R1 and R2 swap the roles. I.e. R2 sends everything correctly over CPE2, but R1 selects R2 for all destinations behind CPEs.









    share

























      0












      0








      0








      I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I have the same result.



      Below I have drawn the network design. Generally everything that is behind CPEs I can't have access. As well I have limited configuration options in networks 10 and 11.



      Simplified network Diagram



      As you may see on the figure, trace from network 2 to 11 is going through R1. So basically the WG R2 has the following routing table:



      Destination     Gateway         Genmask         Flags   Metric    Interface 
      192.168.2.0 0.0.0.0 255.255.255.0 U 0 vlan10
      10.0.0.0 172.17.12.1 255.255.255.255 UGH 20 vlan15
      172.17.12.0 0.0.0.0 255.255.255.248 U 0 vlan15
      172.17.22.0 0.0.0.0 255.255.255.248 U 0 vlan400
      192.168.1.0 172.17.12.1 255.255.255.0 UG 20 vlan15
      192.168.11.0 172.17.12.1 255.255.255.0 UG 20 vlan15
      192.168.10.0 172.17.12.1 255.255.255.0 UG 20 vlan15


      From here I can't understand why my router uses this strange path to 10.0.0.0 and 192.168.10-11.0 networks.



      If we check the OSPF results from the same router, we see the following.



      ============ OSPF network routing table ============
      N 172.17.11.0/29 [20] area: 0.0.0.0
      via 172.17.12.1, vlan15
      N 172.17.22.0/29 [10] area: 0.0.0.0
      directly attached to vlan400
      N 172.17.12.0/29 [10] area: 0.0.0.0
      directly attached to vlan15

      ============ OSPF router routing table =============
      R 172.17.11.1 [20] area: 0.0.0.0, ASBR
      via 172.17.12.1, vlan15
      R 172.17.22.1 [10] area: 0.0.0.0, ASBR
      via 172.17.22.1, vlan400
      R 192.168.1.1 [10] area: 0.0.0.0, ASBR
      via 172.17.12.1, vlan15

      ============ OSPF external routing table ===========
      N E1 100.0.0.0/32 [2020] tag: 6837
      via 172.17.12.1, vlan15
      N E2 192.168.1.0/24 [10/20] tag: 0
      via 172.17.12.1, vlan15
      N E1 192.168.10.0/24 [2020] tag: 6837
      via 172.17.12.1, vlan15
      N E1 192.168.11.0/24 [2020] tag: 6837
      via 172.17.12.1, vlan15


      Could someone turn me into the right direction? It might be a minor thing I could miss, but I can't understand why my WG R2 decides that path through R1 is better than directly via CPE2. It is clear for networks 172.17.11.0/29 and 192.168.1.0, but not for 10th and 11th.



      Moreover when I use auto-cost reference-bandwidth 1000 then the R1 and R2 swap the roles. I.e. R2 sends everything correctly over CPE2, but R1 selects R2 for all destinations behind CPEs.









      share














      I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I have the same result.



      Below I have drawn the network design. Generally everything that is behind CPEs I can't have access. As well I have limited configuration options in networks 10 and 11.



      Simplified network Diagram



      As you may see on the figure, trace from network 2 to 11 is going through R1. So basically the WG R2 has the following routing table:



      Destination     Gateway         Genmask         Flags   Metric    Interface 
      192.168.2.0 0.0.0.0 255.255.255.0 U 0 vlan10
      10.0.0.0 172.17.12.1 255.255.255.255 UGH 20 vlan15
      172.17.12.0 0.0.0.0 255.255.255.248 U 0 vlan15
      172.17.22.0 0.0.0.0 255.255.255.248 U 0 vlan400
      192.168.1.0 172.17.12.1 255.255.255.0 UG 20 vlan15
      192.168.11.0 172.17.12.1 255.255.255.0 UG 20 vlan15
      192.168.10.0 172.17.12.1 255.255.255.0 UG 20 vlan15


      From here I can't understand why my router uses this strange path to 10.0.0.0 and 192.168.10-11.0 networks.



      If we check the OSPF results from the same router, we see the following.



      ============ OSPF network routing table ============
      N 172.17.11.0/29 [20] area: 0.0.0.0
      via 172.17.12.1, vlan15
      N 172.17.22.0/29 [10] area: 0.0.0.0
      directly attached to vlan400
      N 172.17.12.0/29 [10] area: 0.0.0.0
      directly attached to vlan15

      ============ OSPF router routing table =============
      R 172.17.11.1 [20] area: 0.0.0.0, ASBR
      via 172.17.12.1, vlan15
      R 172.17.22.1 [10] area: 0.0.0.0, ASBR
      via 172.17.22.1, vlan400
      R 192.168.1.1 [10] area: 0.0.0.0, ASBR
      via 172.17.12.1, vlan15

      ============ OSPF external routing table ===========
      N E1 100.0.0.0/32 [2020] tag: 6837
      via 172.17.12.1, vlan15
      N E2 192.168.1.0/24 [10/20] tag: 0
      via 172.17.12.1, vlan15
      N E1 192.168.10.0/24 [2020] tag: 6837
      via 172.17.12.1, vlan15
      N E1 192.168.11.0/24 [2020] tag: 6837
      via 172.17.12.1, vlan15


      Could someone turn me into the right direction? It might be a minor thing I could miss, but I can't understand why my WG R2 decides that path through R1 is better than directly via CPE2. It is clear for networks 172.17.11.0/29 and 192.168.1.0, but not for 10th and 11th.



      Moreover when I use auto-cost reference-bandwidth 1000 then the R1 and R2 swap the roles. I.e. R2 sends everything correctly over CPE2, but R1 selects R2 for all destinations behind CPEs.







      routing watchguard ospf





      share












      share










      share



      share










      asked 9 mins ago









      DexteriteDexterite

      14516




      14516






















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962877%2fstrange-path-selection-in-watchguard-ospf%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962877%2fstrange-path-selection-in-watchguard-ospf%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Список ссавців Італії Природоохоронні статуси | Список |...

          Українські прізвища Зміст Історичні відомості |...