Table Of Contents
ip ospf flood-reduction
ip ospf hello-interval
ip ospf lls
ip ospf message-digest-key md5
ip ospf mtu-ignore
ip ospf name-lookup
ip ospf network
ip ospf prefix-suppression
ip ospf priority
ip ospf resync-timeout
ip ospf retransmit-interval
ip ospf shutdown
ip ospf transmit-delay
ip ospf ttl-security
limit retransmissions
local-rib-criteria
log-adjacency-changes
max-lsa
max-metric router-lsa
neighbor (OSPF)
neighbor database-filter all out
network area
nsf (OSPF)
nsf cisco
nsf cisco helper disable
nsf ietf
nsf ietf helper disable
nsf ietf helper strict-lsa-checking
prefix-suppression
process-min-time percent
redistribute maximum-prefix
router ospf
router-id
ip ospf flood-reduction
To suppress the unnecessary flooding of link-state advertisements (LSAs) in stable topologies, use the ip ospf flood-reduction command in interface configuration mode. To disable this feature, use the no form of this command.
ip ospf flood-reduction
no ip ospf flood-reduction
Syntax Description
This command has no arguments or keywords.
Defaults
This command is disabled by default.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.1(2)T
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
All routers supporting the Open Shortest Path First (OSPF) demand circuit are compatible and can interact with routers supporting flooding reduction.
Examples
The following example reduces the flooding of unnecessary LSAs on serial interface 0:
Related Commands
Command
|
Description
|
show ip ospf interface
|
Displays OSPF-related interface information.
|
show ip ospf neighbor
|
Displays OSPF-neighbor information on a per-interface basis.
|
ip ospf hello-interval
To specify the interval between hello packets that the Cisco IOS software sends on the interface, use the ip ospf hello-interval command in interface configuration mode. To return to the default time, use the no form of this command.
ip ospf hello-interval seconds
no ip ospf hello-interval
Syntax Description
seconds
|
Specifies the interval (in seconds). The value must be the same for all nodes on a specific network. The range is from 1 to 65535.
|
Defaults
10 seconds (Ethernet)
30 seconds (nonbroadcast)
Command Modes
Interface configuration
Command History
Release
|
Modification
|
10.0
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
This value is advertised in the hello packets. The smaller the hello interval, the faster topological changes will be detected, but more routing traffic will ensue. This value must be the same for all routers and access servers on a specific network.
Examples
The following example sets the interval between hello packets to 15 seconds:
ip ospf hello-interval 15
Related Commands
Command
|
Description
|
ip ospf dead-interval
|
Sets the time period for which hello packets must not have been seen before neighbors declare the router down.
|
ip ospf lls
To enable Link-Local Signaling (LLS) on an interface, regardless of the router-level LLS setting, use the ip ospf lls command in interface configuration mode. To reconfigure the router-level LLS setting on the specific interface, use the no or default version of this command.
ip ospf lls [disable]
{no | default} ip ospf lls [disable]
Syntax Description
no
|
Restores the default LLS setting for the interface that has been configured at the router level.
|
default
|
Inherits the global (router level) LLS settings for the interface that has been specified.
|
disable
|
(Optional) Disables LLS on a specified interface regardless of the global (router level) setting.
|
Defaults
LLS is enabled.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.0(27)S
|
This command was introduced.
|
12.3(7)T
|
This command was integrated into Cisco IOS Release 12.3(7)T.
|
12.2(25)S
|
This command was integrated into Cisco IOS Release 12.2(25)S.
|
12.2(18)SXE
|
This command was integrated into Cisco IOS Release 12.2(18)SXE.
|
12.2(27)SBC
|
This command was integrated into Cisco IOS Release 12.2(27)SBC.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
Usage Guidelines
By default, each Open Shortest Path First (OSPF) interface inherits the LLS setting from the router level. The ip ospf lls interface-level command takes precedence over the capability lls router-level command. For example, if you have entered the no capability lls command to disable LLS at the router level, you can use the ip ospf lls command to selectively enable LLS for specific interfaces, in order to allow the router to enable OSPF nonstop forwarding (NSF) awareness only for these specified interfaces.
To unconfigure the interface LLS setting, enter either the default ip ospf lls command or the no ip ospf lls command to restore the default LLS setting for the interface that has been configured at the router level. For example, if the capability lls command is enabled (by default) at the router level, you can use either the default ip ospf lls command or the no ip ospf lls command to disable LLS on specific interfaces, for instance, to interoperate on network segments where there are routers that do not properly handle LLS.
Note
If the network is running OSPF with the LLS feature enabled by default, LLS is globally enabled for all interfaces. If a router in the network is connected to a non-Cisco device that is not in compliance with RFC 2328, there may be network difficulties involving the forming of OSPF neighbors. In this situation, we recommend that you use the ip ospf lls command with the disable keyword to disable LLS on the router that is connected to the non-Cisco device.
Examples
In following example, LLS is disabled on Ethernet interface 2/0:
Router(config)# interface Ethernet2/0
Router(config-if)# ip address 10.1.145.2 255.255.0.0
Router(config-if)# no ip directed-broadcast
Router(config-if)# ip ospf message-digest-key 1 md5 testing
Router(config-if)# ip ospf lls disable
Related Commands
Command
|
Description
|
capability lls
|
Enables the use of the LLS data block in originated OSPF packets and reenables OSPF NSF awareness.
|
show ip ospf interface
|
Displays OSPF-related interface information.
|
ip ospf message-digest-key md5
To enable Open Shortest Path First (OSPF) Message Digest 5 (MD5) authentication, use the ip ospf message-digest-key md5 command in interface configuration mode. To remove an old MD5 key, use the no form of this command.
ip ospf message-digest-key key-id encryption-type md5 key
no ip ospf message-digest-key key-id
Syntax Description
key-id
|
An identifier in the range from 1 to 255.
|
encryption-type
|
Specifies the encryption level. The range is from 0 to 7. 0 specifies no encryption. 7 specifies a proprietary level of encryption.
|
key
|
Alphanumeric password of up to 16 bytes.
|
Defaults
OSPF MD5 authentication is disabled.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
11.0
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
Usually, one key per interface is used to generate authentication information when sending packets and to authenticate incoming packets. The same key identifier on the neighbor router must have the same key value.
The process of changing keys is as follows. Suppose the current configuration is as follows:
ip ospf message-digest-key 100 md5 OLD
You change the configuration to the following:
ip ospf message-digest-key 101 md5 NEW
The system assumes its neighbors do not have the new key yet, so it begins a rollover process. It sends multiple copies of the same packet, each authenticated by different keys. In this example, the system sends out two copies of the same packet—the first one authenticated by key 100 and the second one authenticated by key 101.
Rollover allows neighboring routers to continue communication while the network administrator is updating them with the new key. Rollover stops once the local system finds that all its neighbors know the new key. The system detects that a neighbor has the new key when it receives packets from the neighbor authenticated by the new key.
After all neighbors have been updated with the new key, the old key should be removed. In this example, you would enter the following:
no ip ospf message-digest-key 100
Then, only key 101 is used for authentication on Ethernet interface 1.
We recommend that you not keep more than one key per interface. Every time you add a new key, you should remove the old key to prevent the local system from continuing to communicate with a hostile system that knows the old key. Removing the old key also reduces overhead during rollover.
Note
If the service password-encryption command is not used when implementing OSPF MD5 authentication, the MD5 secret will be stored as plain text in NVRAM.
Examples
The following example sets a new key 19 with the password 8ry4222:
ip ospf message-digest-key 10 md5 xvv560qle
ip ospf message-digest-key 19 md5 8ry4222
Related Commands
Command
|
Description
|
area authentication
|
Enables authentication for an OSPF area.
|
ip ospf authentication
|
Specifies authentication type for an interface.
|
service password-encryption
|
Encrypts a password.
|
ip ospf mtu-ignore
To disable Open Shortest Path First (OSPF) maximum transmission unit (MTU) mismatch detection on receiving Database Descriptor (DBD) packets, use the ip ospf mtu-ignore command in interface configuration mode. To reset to default, use the no form of this command.
ip ospf mtu-ignore
no ip ospf mtu-ignore
Syntax Description
This command has no keywords or arguments.
Defaults
OSPF MTU mismatch detection is enabled.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.0(3)
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
OSPF checks whether neighbors are using the same MTU on a common interface. This check is performed when neighbors exchange DBD packets. If the receiving MTU in the DBD packet is higher than the IP MTU configured on the incoming interface, OSPF adjacency will not be established.
Examples
The following example disables MTU mismatch detection on receiving DBD packets:
ip ospf name-lookup
To configure Open Shortest Path First (OSPF) to look up Domain Name System (DNS) names for use in all OSPF show EXEC command displays, use the ip ospf name-lookup command in global configuration mode. To disable this function, use the no form of this command.
ip ospf name-lookup
no ip ospf name-lookup
Syntax Description
This command has no arguments or keywords.
Defaults
This command is disabled by default.
Command Modes
Global configuration
Command History
Release
|
Modification
|
10.0
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
This command makes it easier to identify a router because the router is displayed by name rather than by its router ID or neighbor ID.
Examples
The following example configures OSPF to look up DNS names for use in all OSPF show EXEC command displays:
ip ospf network
To configure the Open Shortest Path First (OSPF) network type to a type other than the default for a given medium, use the ip ospf network command in interface configuration mode. To return to the default value, use the no form of this command.
ip ospf network {broadcast | non-broadcast | {point-to-multipoint [non-broadcast] |
point-to-point}}
no ip ospf network
Syntax Description
broadcast
|
Sets the network type to broadcast.
|
non-broadcast
|
Sets the network type to nonbroadcast multiaccess (NBMA).
|
point-to-multipoint [non-broadcast]
|
Sets the network type to point-to-multipoint. The optional non-broadcast keyword sets the point-to-multipoint network to be nonbroadcast. If you use the non-broadcast keyword, the neighbor command is required.
|
point-to-point
|
Sets the network type to point-to-point.
|
Defaults
Depends on the network type.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
10.0
|
This command was introduced.
|
10.3
|
The point-to-multipoint keyword was added.
|
11.3AA
|
The non-broadcast keyword used with the point-to-multipoint keyword was added.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
Using this feature, you can configure broadcast networks as NBMA networks when, for example, routers in your network do not support multicast addressing. You can also configure nonbroadcast multiaccess networks (such as X.25, Frame Relay, and Switched Multimegabit Data Service (SMDS)) as broadcast networks. This feature saves you from needing to configure neighbors.
Configuring NBMA networks as either broadcast or nonbroadcast assumes that there are virtual circuits from every router to every router or fully meshed networks. However, there are other configurations where this assumption is not true. For example, a partially meshed network. In these cases, you can configure the OSPF network type as a point-to-multipoint network. Routing between two routers that are not directly connected will go through the router that has virtual circuits to both routers. You need not configure neighbors when using this feature.
If this command is issued on an interface that does not allow it, this command will be ignored.
OSPF has two features related to point-to-multipoint networks. One feature applies to broadcast networks; the other feature applies to nonbroadcast networks:
•
On point-to-multipoint, broadcast networks, you can use the neighbor command, and you must specify a cost to that neighbor.
•
On point-to-multipoint, nonbroadcast networks, you must use the neighbor command to identify neighbors. Assigning a cost to a neighbor is optional.
Examples
The following example sets your OSPF network as a broadcast network:
ip address 192.168.77.17 255.255.255.0
ip ospf network broadcast
encapsulation frame-relay
The following example illustrates a point-to-multipoint network with broadcast:
ip address 10.0.1.1 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
frame-relay map ip 10.0.1.3 202 broadcast
frame-relay map ip 10.0.1.4 203 broadcast
frame-relay map ip 10.0.1.5 204 broadcast
frame-relay local-dlci 200
network 10.0.1.0 0.0.0.255 area 0
neighbor 10.0.1.4 cost 10
Related Commands
Command
|
Description
|
frame-relay map
|
Defines mapping between a destination protocol address and the DLCI used to connect to the destination address.
|
neighbor (OSPF)
|
Configures OSPF routers interconnecting to nonbroadcast networks.
|
x25 map
|
Sets up the LAN protocols-to-remote host mapping.
|
ip ospf prefix-suppression
To prevent OSPF from advertising all IP prefixes that belong to a specific interface, except for prefixes that are associated with secondary IP addresses, use the ip ospf prefix-suppression command in interface configuration mode. To remove the per-interface configuration from the interface and allow the interface to inherit the IP prefix suppression setting from the router configuration, use the no form of this command.
ip ospf prefix-suppression [disable]
no ip ospf prefix-suppression
Syntax Description
disable
|
(Optional) Specifies that OSPF will advertise the interface IP prefix, regardless of the router mode configuration for IP prefix suppression.
|
Command Default
All IP prefixes that are associated with the interface are advertised.
Command Modes
Interface configuration (config-if)
Command History
Release
|
Modification
|
12.4(15)T
|
This command was introduced.
|
Usage Guidelines
You can suppress IP prefixes on a per-interface basis for all interface types by entering the ip ospf prefix-suppression command in interface configuration mode.
When the ip ospf prefix-suppression command is configured, it takes precedence over the prefix-suppression router configuration command. If the prefix-suppression router configuration command has been entered, the interfaces for the specified OSPF process will inherit the prefix suppression setting from the router configuration command.
When you enter the ip ospf prefix-suppression command, prefix generation for any interface type, including loopbacks and passive interfaces, are suppressed. Only prefixes associated with secondary IP addressees remain unaffected.
Examples
The following example suppresses all IP prefixes, except for secondary IP addresses, for Ethernet interface 1/1:
ip ospf prefix-suppression
Related Commands
Command
|
Description
|
prefix-suppression
|
Prevents OSPF from advertising all IP prefixes except prefixes associated with loopbacks, secondary IP addresses, and passive interfaces for a specific OSPF process.
|
ip ospf priority
To set the router priority, which helps determine the designated router for this network, use the ip ospf priority command in interface configuration mode. To return to the default value, use the no form of this command.
ip ospf priority number-value
no ip ospf priority
Syntax Description
number-value
|
A number value that specifies the priority of the router. The range is from 0 to 255.
|
Command Default
Priority of 1
Command Modes
Interface configuration (config-if)
Command History
Release
|
Modification
|
10.0
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
When two routers attached to a network both attempt to become the designated router, the one with the higher router priority takes precedence. If there is a tie, the router with the higher router ID takes precedence. A router with a router priority set to zero is ineligible to become the designated router or backup designated router. Router priority is configured only for interfaces to multiaccess networks (in other words, not to point-to-point networks).
This priority value is used when you configure Open Shortest Path First (OSPF) for nonbroadcast networks using the neighbor router configuration command for OSPF.
Examples
The following example sets the router priority value to 4:
Related Commands
Command
|
Description
|
ip ospf network
|
Configures the OSPF network type to a type other than the default for a given medium.
|
neighbor (OSPF)
|
Configures OSPF routers interconnecting to nonbroadcast networks.
|
ip ospf resync-timeout
To configure how long the router will wait before taking a neighbor adjacency down if the out-of-band resynchronization (oob-resync) has not taken place since the time a restart signal (Open Shortest Path First [OSPF] hello packet with RS-bit set) was received from the neighbor, use the ip ospf resync-timeout command in interface configuration mode. To restore the default value, use the no form of this command.
ip ospf resync-timeout seconds
no ip ospf resync-timeout
Syntax Description
seconds
|
Number of seconds the router will wait before taking a neighbor adjacency down if the out-of-band resynchronization (oob-resync) has not taken place since the time a restart signal (OSPF hello packet with RS-bit set) was received from the neighbor. The value is in the range from 1 to 65535 seconds. The default value is 40 seconds or the value set for the OSPF dead interval for the interface, whichever is greater.
|
Command Default
The default value is 40 seconds or the value set for the interface's OSPF dead interval, whichever is greater.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.2(15)T
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2(31)SB2
|
This command was integrated into Cisco IOS Release 12.2(31)SB2.
|
12.2(33)SXH
|
This command was integrated into Cisco IOS Release 12.2(33)SXH.
|
Usage Guidelines
When an OSPF nonstop forwarding (NSF) router performs a route processor (RP) switchover, it notifies its neighbors, via a special hello packet, of such action and requests that each neighbor help resynchronize the Link State Database.
When a neighbor (that is NSF-aware) receives the special hello packet from the NSF-capable router, it starts a resync timeout timer and waits to synchronize its database with the NSF-capable router. If the NSF-capable router does not initiate the database resynchronization process before the resync-timeout timer expires, the NSF-aware neighbor will take down the adjacency with the NSF-capable router.
By default, the resync-timeout timer is set to 40 seconds or the dead interval of the interface, whichever is greater. (By default, the dead interval is 4 times the hello interval; the hello interval defaults to 10 seconds for Ethernet or 30 seconds for nonbroadcast.) The ip ospf resync-timeout command allows the resync-timeout to be changed and independent of the dead interval or default value.
Examples
This example sets the OSPF resync-timeout interval to 50 seconds:
interface GigabitEthernet 6/0/0
ip ospf resync-timeout 50
Related Commands
Command
|
Description
|
ip ospf dead-interval
|
Sets the interval at which hello packets must not be seen before neighbors declare the router down.
|
ip ospf hello-interval
|
Sets the interval between hello packets that the software sends on the interface.
|
ip ospf retransmit-interval
To specify the time between link-state advertisement (LSA) retransmissions for adjacencies belonging to the interface, use the ip ospf retransmit-interval command in interface configuration mode. To return to the default value, use the no form of this command.
ip ospf retransmit-interval seconds
no ip ospf retransmit-interval
Syntax Description
seconds
|
Time (in seconds) between retransmissions. The range is from 1 to 65535 seconds. The default is 5 seconds.
|
Defaults
5 seconds
Command Modes
Interface configuration
Command History
Release
|
Modification
|
10.0
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
When a router sends an LSA to its neighbor, it keeps the LSA until it receives back the acknowledgment message. If the router receives no acknowledgment, it will resend the LSA.
The setting of the seconds argument should be greater than the expected round-trip delay between any two routers on the attached network. The setting of this parameter should also be conservative, or needless LSA retransmissions may occur. The value should be larger for serial lines and virtual links.
Note
It is recommended to use the same value for the seconds argument on neighbor OSPF routers. Using inconsistent values on neighbor routers can cause needless LSA retransmissions.
Examples
The following example sets the retransmit interval value to 8 seconds:
ip ospf retransmit-interval 8
ip ospf shutdown
To initiate an Open Shortest Path First (OSPF) protocol graceful shutdown at the interface level, use the ip ospf shutdown command in interface configuration mode. To restart the OSPF protocol on an interface, use the no form of this command
ip ospf shutdown
no ip ospf shutdown
Syntax Description
This command has no arguments or keywords.
Command Default
No OSPF graceful shutdown is performed.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.2(33)SRC
|
This command was introduced.
|
Usage Guidelines
Use the ip ospf shutdown command to put OSPF under a specific interface in shutdown mode.
Examples
The following example shows how to initiate an OSPF protocol shutdown on the Ethernet 0 interface:
Router(config)# interface ethernet 0
Router(config-if)# ip ospf shutdown
Related Commands
Command
|
Description
|
shutdown (router ospf)
|
Initiates a graceful shutdown of the OSPF protocol under the current instance.
|
ip ospf transmit-delay
To set the estimated time required to send a link-state update packet on the interface, use the ip ospf transmit-delay command in interface configuration mode. To return to the default value, use the no form of this command.
ip ospf transmit-delay seconds
no ip ospf transmit-delay
Syntax Description
seconds
|
Time (in seconds) required to send a link-state update. The range is from 1 to 65535 seconds. The default is 1 second.
|
Defaults
1 second
Command Modes
Interface configuration
Command History
Release
|
Modification
|
10.0
|
This command was introduced.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
Link-state advertisements (LSAs) in the update packet must have their ages incremented by the amount specified in the seconds argument before transmission. The value assigned should take into account the transmission and propagation delays for the interface.
If the delay is not added before transmission over a link, the time in which the LSA propagates over the link is not considered. This setting has more significance on very low-speed links.
Examples
The following example sets the retransmit delay value to 3 seconds:
ip ospf ttl-security
To configure the Time-to-Live (TTL) security check feature on a specific interface, use the ip ospf ttl-security command in interface configuration mode. To disable TTL security on an interface, use the no form of this command.
ip ospf ttl-security [hops hop-count | disable]
no ip ospf ttl-security
Syntax Description
hops hop-count
|
(Optional) Configures the maximum number of IP hops. The hop-count argument range is from 1 to 254.
|
disable
|
(Optional) Disables TTL security on an interface.
|
Command Default
TTL security is disabled on all OSPF interfaces.
Command Modes
Interface configuration (config-if)
Command History
Release
|
Modification
|
12.2(33)SRC
|
This command was introduced.
|
Usage Guidelines
Use the ip ospf ttl-security command to configure TTL security on a specific interface.
The disable keyword can be used to disable TTL security on a specific interface but is only useful if the ttl-security all-interfaces command was used in router mode to first configure TTL security on all OSPF interfaces. In this way, all OSPF interfaces can be configured with TTL security and then individual interfaces can be disabled. This can save time as opposed to configuring each interface one-by-one from the start.
Examples
The following example shows how to effectively use the disable keyword to disable TTL security on the Ethernet 0/0 interface after the feature has first been configured on all OSPF interfaces:
Router# configure terminal
Router(config)# router ospf 1
Router(config-router)# ttl-security all-interfaces
Router(config-router)# exit
Router(config)# interface ethernet 0/0
Router(config-if)# ip ospf ttl-security disable
Related Commands
Command
|
Description
|
ttl-security all-interfaces
|
Configures TTL security check on all OSPF interfaces.
|
limit retransmissions
To change or remove the limit in the number of retransmissions of database exchange and update packets for both demand and non-demand circuits, use the limit retransmissions command in router configuration mode. To reset the maximum number of retransmissions back to the default value of 24, use the no form of this command.
limit retransmissions [dc {max-number | disable}] [non-dc {max-number | disable}]
no limit transmissions [dc | non-dc]
Syntax Description
dc
|
Demand circuit retransmissions.
|
max-number
|
Maximum number of retransmissions. Range from 1 to 255.
|
non-dc
|
Nondemand circuit retransmissions.
|
disable
|
Disables or removes the limit to the number of retransmissions.
|
Defaults
Maximum number of retransmissions is 24.
Command Modes
Router configuration
Command History
Release
|
Modification
|
12.2(11)T
|
This command was introduced.
|
Usage Guidelines
Cisco IOS Release 12.2(4)T added a limit to the number of retransmissions of database exchange and update packets for both demand and nondemand circuits. The retransmission of these packets stops once this retry limit is reached, thus preventing unnecessary use of the link in continual retransmission of the packets if, for some reason, a neighbor is not responding during adjacency forming.
The limit for both demand circuit and nondemand circuit retransmissions is 24.
The limit-retransmissions command allows you to either remove (disable) the limit or change the maximum number of retransmissions to be a number from 1 to 255. The configuration of this command provides for backward compatibility for previous or other releases of Cisco IOS Software or other routers that do not have this feature.
Note
The limit to the number of retransmissions does not apply for update packets on nonbroadcast multiaccess (NBMA) point-to-multipoint direct circuits. In this situation, the dead timer is used to end communication with nonresponding neighbors and thus stop the retransmissions.
Examples
The following example shows how to set the maximum number of demand circuit retransmissions to 10:
limit retransmissions dc 10
The following example shows how to remove the limit for the number of demand circuit retransmissions:
limit retransmissions dc disable
The following example shows how to set the maximum number of demand circuit retransmissions to 10 and to set the maximum number of nondemand circuit retransmissions to 20:
limit retransmissions dc 10 non-dc 20
The following example shows how to set the maximum number of demand circuit retransmissions to 10, and to remove the limit for the number of nondemand circuit retransmissions:
limit retransmissions dc 10 non-dc disable
The following example shows how to reset both the demand circuit and nondemand circuit maximum number of retransmissions back to the default of 24:
Related Commands
Command
|
Description
|
router ospf
|
Configures an OSPF routing process.
|
local-rib-criteria
To specify that the OSPF local Routing Information Base (RIB) will be used for route validation, use the local-rib-criteria command in router configuration mode. To remove local RIB route validation, use the no form of this command.
local-rib-criteria [forwarding-address] [inter-area-summary] [nssa-translation]
no local-rib-criteria [forwarding-address] [inter-area-summary] [nssa-translation]
Syntax Description
forwarding-address
|
(Optional) Specifies that the local RIB is to be used only for route validation criteria for external or NSSA forwarding addresses.
|
inter-area-summary
|
(Optional) Specifies that the local RIB is to be used only for route validation criteria for inter-area summaries.
|
nssa-translation
|
(Optional) Specifies that the local RIB is to be used only for route validation criteria for NSSA translation.
|
Command Default
The global RIB (not the local RIB) is used for route validation.
Command Modes
Router configuration (config-router)
Command History
Release
|
Modification
|
12.4(15)T
|
This command was introduced.
|
Usage Guidelines
If the local-rib-criteria is command is entered without any optional keywords, the local RIB will be used as criteria for all of the options (forwarding address, inter-area summary, and NSSA translation).
You can enter the local-rib-criteria command with one or more of the optional keywords to configure the OSPF routing process to use the local RIB only for forwarding address, inter-area-summary, or NSSA translation route generation.
Note
It is recommended to keep the default behavior (the global RIB is used for route validation). Although entering the local-rib-criteria command alone or with one or more of the optional keywords may result in slightly faster network convergence in some cases, you may potentially cause a problem such as a routing loop or black hole.
Note
When the forwarding-address keyword is entered to specify that forwarding-address verification is modified to use the local RIB, packet forwarding will still be dependent on the global RIB. If the global RIB contains a more preferred or more specific route from a different protocol, this preferred route still will still be used for packet forwarding.
Examples
The following example specifies that the local RIB should be used as the criteria for NSSA translation:
local-rib-criteria nssa-translation
The following example enables all local RIB criteria options:
router ospf 1
local-rib-criteria
The following example specifies that the local RIB will be used only for inter-area summary route generation:
router ospf 1
local-rib-criteria inter-area-summary
log-adjacency-changes
To configure the router to send a syslog message when an Open Shortest Path First (OSPF) neighbor goes up or down, use the log-adjacency-changes command in router configuration mode. To turn off this function, use the no form of this command.
log-adjacency-changes [detail]
no log-adjacency-changes [detail]
Syntax Description
detail
|
(Optional) Sends a syslog message for each state change, not just when a neighbor goes up or down.
|
Command Default
Enabled
Command Modes
Router configuration
Command History
Release
|
Modification
|
11.2
|
This command was introduced as ospf log-adjacency-changes.
|
12.1
|
The ospf keyword was omitted and the detail keyword was added.
|
12.2(15)T
|
Support for IPv6 was added.
|
12.2(28)SB
|
This command was integrated into Cisco IOS Release 12.2(28)SB.
|
12.2SX
|
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
|
Usage Guidelines
This command allows you to know about OSPF neighbors going up or down without turning on the debug ip ospf packet command or the debug ipv6 ospf adjacency command. The log-adjacency-changes command provides a higher level view of those changes of the peer relationship with less output than the debug command provides. The log-adjacency-changes command is on by default but only up/down (full/down) events are reported, unless the detail keyword is also used.
Examples
The following example configures the router to send a syslog message when an OSPF neighbor state changes:
log-adjacency-changes detail
Related Commands
Command
|
Description
|
debug ip ospf packet
|
Displays information about each OSPF packet received for IPv4.
|
debug ipv6 ospf
|
Displays debugging information for OSPF for IPv6.
|
max-lsa
To limit the number of nonself-generated link-state advertisements (LSAs) that an Open Shortest Path First (OSPF) routing process can keep in the OSPF link-state database (LSDB), use the max-lsa command in router configuration mode. To remove the limit of non self-generated LSAs that an OSPF routing process can keep in the OSPF LSDB, use the no form of this command.
max-lsa maximum-number [threshold-percentage] [warning-only] [ignore-time minutes]
[ignore-count count-number] [reset-time minutes]
no max-lsa maximum-number [threshold-percentage] [warning-only] [ignore-time minutes]
[ignore-count count-number] [reset-time minutes]
Syntax Description
maximum-number
|
Maximum number of nonself-generated LSAs the OSPF process can keep in the OSPF LSBD.
|
threshold-percentage
|
(Optional) The percentage of the maximum LSA number, as specified by the maximum-number argument, at which a warning message is logged. The default is 75 percent.
|
warning-only
|
(Optional) Specifies that only a warning message is sent when the maximum limit for LSAs is exceeded. Disabled by default.
|
ignore-time minutes
|
(Optional) Specifies the time, in minutes, to ignore all neighbors after the maximum limit of LSAs has been exceeded. The default is 5 minutes.
|
ignore-count count-number
|
(Optional) Specifies the number of times the OSPF process can consecutively be placed into the ignore state. The default is 5 times.
|
reset-time minutes
|
(Optional) Specifies the time, in minutes, after which the ignore count is reset to zero. The default is 10 minutes.
|
Defaults
The number of nonself-generated LSAs that an OSPF routing process can keep in the OSPF LSDB is not limited.
threshold-percentage: 75 percent
warning-only warning message: disabled
ignore-time minutes: 5 minutes
ignore-count count-number: 5 times
reset-time minutes: 10 minutes
Command Modes
Router configuration
Command History
Release
|
Modification
|
12.0(27)S
|
This command was introduced.
|
12.3(7)T
|
This command was integrated into Cisco IOS Release 12.3(7)T.
|
12.2(25)S
|
This command was integrated into Cisco IOS Release 12.2(25)S.
|
12.2(18)SXE
|
This command was integrated into Cisco IOS Release 12.2(18)SXE.
|
12.2(27)SBC
|
This command was integrated into Cisco IOS Release 12.2(27)SBC.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
Usage Guidelines
To prevent the OSPF process from endlessly changing from the normal state of operation to the ignore state as a result of the LSA count exceeding the maximum configured number immediately after it returns from the ignore state to the normal state of operation, the OSPF process keeps a counter on how many times the process went into the ignore state. This counter is called the ignore count. If the ignore count exceeds the maximum number of LSAs that is specified by the ignore-count keyword and counter-number argument, the OSPF process remains in the ignore state permanently. To return the OSPF process to the state of normal operation, enter the clear ip ospf command.
If the router is placed into a permanent ignore state, we recommend that you identify and correct the cause of the problem involving the router that is generating the LSAs, or, if possible, increase the limit that has been configured by the max-lsa command before you try to bring the router back into normal operation.
If the router that has generated large numbers of LSAs is not reachable, these LSAs cannot be removed from the OSPF area and domain. As a result, any other router leaving the ignore state and returning to normal operation may reach the ignore state again. We recommend that you take one of the following actions in order to bring the router back into the network:
•
Temporarily increase the LSA limit to account for the stale LSAs.
•
Wait until the stale LSAs are removed as a result of reaching their maximum age.
•
Make sure that the router that has generated the large number of LSAs is connected to the network and is no longer generating large numbers of LSAs.
When the warning-only keyword is used, the OSPF process never enters the ignore state. When the LSA count exceeds the maximum limit that is specified by the maximum-number argument, only an error message is logged and the OSPF process continues in its normal operation.
When the max-lsa command is entered for the first time or when any of the parameters of the command are changed, the OSPF process undergoes a soft-reset procedure.
Examples
The following example sets a limit of 12,000 LSAs that can be received before the OSPF process enters the ignore state:
Router(config)# router ospf 100
Router(config-router)# router-id 209.165.201.0
Router(config-router)# log-adjacency-changes
Router(config-router)# max-lsa 12000
Router(config-router)# network 209.165.201.1 255.255.255.255
In the following example, an OSPF process has remained in the ignore state permanently. When the clear ip ospf command is entered the OSPF process returns to the state of normal operation and clears redistribution based on the OSPF routing process ID.
Router(config-router)# clear ip ospf 100 process
Related Commands
Command
|
Description
|
clear ip ospf
|
Clears redistribution based on the OSPF routing process ID.
|
max-metric router-lsa
To configure a router that is running the Open Shortest Path First (OSPF) protocol to advertise a maximum metric so that other routers do not prefer the router as an intermediate hop in their shortest path first (SPF) calculations, use the max-metric router-lsa command in router address family topology or router configuration mode. To disable the advertisement of a maximum metric, use the no form of this command.
max-metric router-lsa [external-lsa [max-metric-value]] [include-stub] [on-startup {seconds |
wait-for-bgp}] [summary-lsa [max-metric-value]]
no max-metric router-lsa [external-lsa [max-metric-value]] [include-stub] [on-startup {seconds
| wait-for-bgp}] [summa