Re: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs

"Balaji Ganesh (balagane)" <balagane@cisco.com> Wed, 10 August 2016 09:20 UTC

Return-Path: <balagane@cisco.com>
X-Original-To: ospf@ietfa.amsl.com
Delivered-To: ospf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 696C312D129 for <ospf@ietfa.amsl.com>; Wed, 10 Aug 2016 02:20:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.767
X-Spam-Level:
X-Spam-Status: No, score=-15.767 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.247, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gr3UVO2F3oPh for <ospf@ietfa.amsl.com>; Wed, 10 Aug 2016 02:20:03 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A01712D18B for <ospf@ietf.org>; Wed, 10 Aug 2016 02:20:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=105527; q=dns/txt; s=iport; t=1470820803; x=1472030403; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=uXIewS7bF3bWifC8J36I80D8ikseqcPjAu7Ahkgy+bE=; b=U60qCdCsJM7o2ebakBFeRSCEq46mG1Py94dvliyw5A1mgtPFe8PRbDu5 13wRWEAnpCNe8swdc//ss15RRtnJFjGo23sXOXgIpN77jUqQWoOS6PDB4 VZpIzrRw9h/RM/Arll+tz0/oaj3Kea/8tIYatYmM3hem4d3H+fRNsfE0a 8=;
X-Files: image002.jpg, image004.jpg : 28592, 20200
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BVAgDk8KpX/5ldJa1dgndOVnwHgnqzEIEGgg+BfYUNgRACHIE8OBQBAQEBAQEBXSeEXgEBBQUHFwIIAVsCAQYCEQMBAQEGAQEBCg4BBgMCAgIFEA8MFAkIAQEEAREBCAaII5QJnSGQJgEBAQEBAQEBAQEBAQEBAQEBAQEBAQ4OhiqETYRgFoJLgloFk3iDOgOCBwGFLQGJXIFyhFsMiHGMNINwBwEeNoISHIFMboYtfwEBAQ
X-IronPort-AV: E=Sophos;i="5.28,499,1464652800"; d="jpg'145?scan'145,208,145,217";a="133933538"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 10 Aug 2016 09:20:02 +0000
Received: from XCH-RCD-013.cisco.com (xch-rcd-013.cisco.com [173.37.102.23]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id u7A9K1V7004901 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 10 Aug 2016 09:20:02 GMT
Received: from xch-aln-017.cisco.com (173.36.7.27) by XCH-RCD-013.cisco.com (173.37.102.23) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 10 Aug 2016 04:20:01 -0500
Received: from xch-aln-017.cisco.com ([173.36.7.27]) by XCH-ALN-017.cisco.com ([173.36.7.27]) with mapi id 15.00.1210.000; Wed, 10 Aug 2016 04:20:00 -0500
From: "Balaji Ganesh (balagane)" <balagane@cisco.com>
To: Veerendranatha Reddy Vallem <veerendranatharv@huawei.com>, "Acee Lindem (acee)" <acee@cisco.com>, OSPF WG List <ospf@ietf.org>
Thread-Topic: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs
Thread-Index: AdHyOlw5dgxaSWzRReONo0izcxpwhQAC0YxQABcCsgAAEz8SgAAI9osw
Date: Wed, 10 Aug 2016 09:20:00 +0000
Message-ID: <fc520410427b4481b1de037715854286@XCH-ALN-017.cisco.com>
References: <73BFDDFFF499304EB26FE5FDEF20F7885081B591@blreml501-mbx> <49270bb6e31e4eecbc264fd06756b2b0@XCH-ALN-017.cisco.com> <D3CFABC0.77583%acee@cisco.com> <73BFDDFFF499304EB26FE5FDEF20F7885081B7E5@blreml501-mbx>
In-Reply-To: <73BFDDFFF499304EB26FE5FDEF20F7885081B7E5@blreml501-mbx>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.232.12.128]
Content-Type: multipart/related; boundary="_005_fc520410427b4481b1de037715854286XCHALN017ciscocom_"; type="multipart/alternative"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/ospf/AOVG7wp1RYK0donK8DQLMB5xS1s>
Subject: Re: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs
X-BeenThere: ospf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: The Official IETF OSPG WG Mailing List <ospf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ospf>, <mailto:ospf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ospf/>
List-Post: <mailto:ospf@ietf.org>
List-Help: <mailto:ospf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ospf>, <mailto:ospf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Aug 2016 09:20:05 -0000

Hi Veerendra,

Please see inline again…

Regards,
Balaji

From: Veerendranatha Reddy Vallem [mailto:veerendranatharv@huawei.com]
Sent: 10 August 2016 10:35
To: Acee Lindem (acee) <acee@cisco.com>; Balaji Ganesh (balagane) <balagane@cisco.com>; OSPF WG List <ospf@ietf.org>
Subject: RE: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs

Thanks to Balaji and Acee for clarification.

Regarding Acee clarification,
I think it is other way. If the “p-bit is not to be set (clear)”, then NSSA LSA may be originated without FA. If the “p bit is to be set”, the NSSA LSA must not be originated when no forwarding address is available. As per section 2.3  in RFC 3101

For an NSSA with no such network the forwarding address
   field may only be filled with an address from one of the its active
   interfaces or 0.0.0.0.  If the P-bit is set, the forwarding address
   must be non-zero; otherwise it may be 0.0.0.0.  If an NSSA requires
   the P-bit be set and a non-zero forwarding address is unavailable,
   then the route's Type-7 LSA is not originated into this NSSA.
Please confirm.

Some OSPFV3 NSSA implementations of different vendors, supported Translation of Type-7 with “no FA” but “p bit is set”, are translating to Type-5 LSAs.

If new implementation strict to do not translate then, it may cause inter-op issues with such implementations.
So whether new implementations are also required to support those LSA translation to make compatible with older ones?

>>>[BALAJI: I don’t see any issue in originating an NSSA LSA with P-bit set and without forwarding address, if the implementations do not translate such LSAs.
The think any implementation should not translate such LSAs.
If the LSAs are translated, that would could probably cause suboptimal routing/inter-op issues, especially with 2 or more NSSA ABRs.

Would let Acee confirm on the same.]

Regards,
Veerendranath

From: Acee Lindem (acee) [mailto:acee@cisco.com]
Sent: 10 August 2016 01:24
To: Balaji Ganesh (balagane) <balagane@cisco.com<mailto:balagane@cisco.com>>; Veerendranatha Reddy Vallem <veerendranatharv@huawei.com<mailto:veerendranatharv@huawei.com>>; OSPF WG List <ospf@ietf.org<mailto:ospf@ietf.org>>
Subject: Re: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs

Hi Veera, Balaji,

While I was contributor to this RFC ;^), I can see it could use some more normative language to cover these cases where no IPv6 forwarding address is available. I basically agree with Balaji, if the P-bit is to be set in the NSSA-LSA, the LSA MAY be originated w/o a forwarding address (in OSPFv3 forward address encoding is optional). If the P-bit is to be clear in the NSSA-LSA, the NSSA-LSA MUST NOT be originated when no forwarding address is available.

Thanks,
Acee

From: OSPF <ospf-bounces@ietf.org<mailto:ospf-bounces@ietf.org>> on behalf of "Balaji Ganesh (balagane)" <balagane@cisco.com<mailto:balagane@cisco.com>>
Date: Tuesday, August 9, 2016 at 10:10 AM
To: Veerendranatha Reddy Vallem <veerendranatharv@huawei.com<mailto:veerendranatharv@huawei.com>>, OSPF WG List <ospf@ietf.org<mailto:ospf@ietf.org>>
Subject: Re: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs

Hi Veera,

Please see inline..


Regards,
Balaji

From: OSPF [mailto:ospf-bounces@ietf.org] On Behalf Of Veerendranatha Reddy Vallem
Sent: 09 August 2016 18:04
To: OSPF WG List <ospf@ietf.org<mailto:ospf@ietf.org>>
Subject: [OSPF] [OSPFv3] regarding p bit set and FA for NSSA (Type-7) LSAs

Hi All,
Can you please provide clarification for following in OSPFv3 NSSA implementation.

As RFC 3101 is considered NSSA RFC for both OSPFv2 and OSPFv3,

Case 1:

As per RFC 3101, 2.4 section, While originating Type-7 LSA, if p –bit is set, then Forwarding address (FA) must be non- zero.


[cid:image002.jpg@01D1F2F9.54850FC0]

For OSPFv3 case, there may be possible FA  is not available (no global address is configured on any of NSSA interface).
If OSPFv3 receives Type-7 LSA with p bit set but no forwarding address, whether this LSA should be consider as valid and can be used for route calculation?


[BALAJI: If the Type-7 LSA has no forwarding address, it does not get translated to Type-5. This is specified in the RFC section 2.3, point 6


      6. Those Type-7 LSAs that are to be translated into Type-5 LSAs

         must have their forwarding address set.

However the LSA is still valid and would be used inside the NSSA area.
]

Case 2:
In section 3.2  , Translating Type-7 LSAs into Type-5 LSAs
[cid:image004.jpg@01D1F2F9.54850FC0]
Same in OSPFv3, if we received Type-7 LSA with no forwarding address but ‘p’ bit set, whether ABR is allowed to translate this LSA to Type-5 External LSA?

[BALAJI: No. ABR should not be translating such LSAs without forwarding address. This is again as per section 2.3, point 6 in the RFC.]

As per my understanding, if Forwarding address is not available, Type-7 LSA must be originated with no ‘p’ bit set and no forwarding address. If ‘p’ bit is set means, it must  always
Carry forwarding address(for OSPFv3, it must be global ipv6 address configured on any of interfaces).


[BALAJI: P-bit not being set would explicitly mean that we don’t want the LSA to be translated. Probably to keep the redistributed prefixes only within the NSSA area (for whatever reason it may be).
If P-bit is set, it should also have a forwarding address for it to be translated.]

Please let me know whether my understanding is correct or not for OSPFv3, as per RFC 3101.

Regards,
Veerendranath