I'm trying to get OSPF over an IPSec tunnel between an SSG-20 and a Ubiquiti EdgeRouter. The tunnel is fine and works well with static routing, but OSPF is not working. They are exchanging OSPF data, but on the Juniper I get
## 2018-03-30 22:34:31 : ospf: send LSU pkt to 10.10.10.99 on tunnel.9 len 1072 ## 2018-03-30 22:34:31 : ospf: send pkt to 10.10.10.99 on tunnel.9 len 1072 ## 2018-03-30 22:34:31 : ospf: process rx pak len 32 from 10.10.10.99 on tunnel.9 in vr trust-vr router-id 0.0.0.1 ## 2018-03-30 22:34:31 : ospf: recv pkt on tunnel.9, 10.10.10.99->224.0.0.5 ## 2018-03-30 22:34:31 : ospf: recv DBD from nbr 10.10.10.99 on tunnel.9 seq 0x81db7.. flags INIT,MORE,MASTER len 0 mtu 1436 state FULL ## 2018-03-30 22:34:31 : ospf: NBR seqmismatch event, case else ## 2018-03-30 22:34:31 : ospf: recv bad LSR from neighbor 10.10.10.99 10.10.10.99 (Id) on tunnel.9 ## 2018-03-30 22:34:31 : ospf: neighbor 10.10.10.99 10.10.10.99 (Id) on tunnel.9 state change FULL->EX_START ## 2018-03-30 22:34:31 : ospf: hold down timer, rebuild router LSA later ## 2018-03-30 22:34:31 : ospf: send DBD to 10.10.10.99 on tunnel.9 seq 0x81db6 flag INIT,MORE,MASTER len 32 ## 2018-03-30 22:34:31 : ospf: send pkt to 10.10.10.99 on tunnel.9 len 32
There is no sign of trouble on the EdgeRouter other than the fact that OSPF never fully connects. My only clue is what you see above.
Any ideas?