Troubleshooting Scenario: OSPF Area Mismatch

What is OSPF?

Open Shortest Path First (OSPF) is an Interior Gateway Protocol (IGP) based on the Link-State routing algorithm. It uses Dijkstra's Shortest Path First (SPF) algorithm to calculate the most efficient loop-free path to every destination network. OSPF operates inside Autonomous Systems (AS), converges rapidly, supports Classless Inter-Domain Routing (CIDR), and uses multicast IP traffic (224.0.0.5 and 224.0.0.6) for routing updates.

Types of OSPF Routers & Areas

• Backbone Area (Area 0): The core central area through which all traffic between other OSPF non-backbone areas must traverse.
• Internal Router (IR): A router with all its active interfaces belonging entirely to a single OSPF area.
• Area Border Router (ABR): A router located on the boundary of Area 0 and one or more non-backbone areas.
• Autonomous System Boundary Router (ASBR): A router connected to external networks (e.g., connected to BGP, EIGRP, or Static routes).

OSPF Neighbor Adjacency States

• Down: Initial OSPF state; no Hello packets have been received from the neighbor.
• Init: Hello packet received from neighbor, but bidirectional communication is not yet confirmed.
• 2-Way: Bidirectional link established; local Router ID appears in neighbor's Hello packet. DR/BDR election occurs here on multi-access networks.
• ExStart: Routers establish a Master/Slave relationship to negotiate Database Description (DBD) sequence numbers.
• Exchange: Routers exchange Link-State Database Description (DBD) packets.
• Loading: Routers send Link-State Requests (LSR) to request detailed Link-State Advertisements (LSA).
• Full: Full adjacency reached; Link-State Databases (LSDB) are completely synchronized across routers.

OSPF Link State Advertisement (LSA) Types

• LSA Type 1 (Router LSA): Generated by all routers within a single area to describe directly connected links.
• LSA Type 2 (Network LSA): Generated by the Designated Router (DR) to describe attached multi-access networks.
• LSA Type 3 (Summary LSA): Generated by ABRs to send intra-area network summaries between different areas.
• LSA Type 4 (ASBR Summary LSA): Generated by ABRs to inform other areas how to reach an ASBR.
• LSA Type 5 (AS External LSA): Generated by ASBRs to advertise routes redistributed from outside the OSPF domain.

OSPF Security & Authentication

• Plaintext Authentication: Simple password check embedded in OSPF packet headers.
• MD5 Cryptographic Authentication: Uses MD5 hashing to authenticate OSPF Hello and LSA updates securely.
• HMAC-SHA Authentication: Modern cryptographic algorithm protecting against spoofing and tampering.
• Passive Interface Configuration: Disables sending OSPF Hello packets on non-router facing LAN segments to minimize attack surfaces.

Where to Use OSPF?

• Enterprise Core Networks: Interior routing across multi-building campuses and large enterprise offices.
• Data Center Leaf-Spine Topologies: Providing fast convergence and dynamic IP reachability within data center fabrics.
• ISP Backbone Infrastructure: Operating as an IGP underlying BGP/MPLS backbones.