OSPF HELLO packets not getting sent out

[matthewc97]

I am trying to advertise the anycast IP address 10.255.253.20 (lo.0 dummy interface) using OSPF via the transit IP address 10.32.55.20 (eth1 ethernet interface). Both interfaces are assigned to the same VRF:

sgzls1870d# show interface brief
Interface       Status  VRF             Addresses
---------       ------  ---             ---------
anycast         up      anycast
eth1            up      anycast         10.32.55.20/26
lo.0            up      anycast         10.255.253.20/32

Interface       Status  VRF             Addresses
---------       ------  ---             ---------
eth0            up      default         10.35.2.10/24
lo              up      default

Configuration:

sgzls1870d# show running-config
Building configuration...

Current configuration:
!
frr version 8.5.2
frr defaults traditional
hostname sgzls1870d
no ip forwarding
!
interface eth1
 ip address 10.32.55.20/26
 ip ospf authentication message-digest
 ip ospf dead-interval 5
 ip ospf hello-interval 1
 ip ospf message-digest-key 1 md5 REDACTED
 ip ospf priority 0
 ip ospf retransmit-interval 3
 no ip ospf passive
exit
!
interface lo.0
 ip address 10.255.253.20/32
 ip ospf passive
exit
!
router ospf vrf anycast
 ospf router-id 10.32.55.20
 network 10.32.55.0/26 area 0.0.0.32
 network 10.255.253.20/32 area 0.0.0.32
exit
!
end

sgzls1870d# show ip ospf vrf anycast
VRF Name: anycast
 OSPF Routing Process, Router ID: 10.32.55.20
 Supports only single TOS (TOS0) routes
 This implementation conforms to RFC2328
 RFC1583Compatibility flag is disabled
 OpaqueCapability flag is disabled
 Initial SPF scheduling delay 0 millisec(s)
 Minimum hold time between consecutive SPFs 50 millisec(s)
 Maximum hold time between consecutive SPFs 5000 millisec(s)
 Hold time multiplier is currently 2
 SPF algorithm last executed 1m30s ago
 Last SPF duration 64 usecs
 SPF timer is inactive
 LSA minimum interval 5000 msecs
 LSA minimum arrival 1000 msecs
 Write Multiplier set to 20
 Refresh timer 10 secs
 Maximum multiple paths(ECMP) supported 256
 Administrative distance 110
 Number of external LSA 0. Checksum Sum 0x00000000
 Number of opaque AS LSA 0. Checksum Sum 0x00000000
 Number of areas attached to this router: 1
 Area ID: 0.0.0.32
   Shortcutting mode: Default, S-bit consensus: ok
   Number of interfaces in this area: Total: 2, Active: 2
   Number of fully adjacent neighbors in this area: 0
   Area has no authentication
   Number of full virtual adjacencies going through this area: 0
   SPF algorithm executed 2 times
   Number of LSA 1
   Number of router LSA 1. Checksum Sum 0x0000a65d
   Number of network LSA 0. Checksum Sum 0x00000000
   Number of summary LSA 0. Checksum Sum 0x00000000
   Number of ASBR summary LSA 0. Checksum Sum 0x00000000
   Number of NSSA LSA 0. Checksum Sum 0x00000000
   Number of opaque link LSA 0. Checksum Sum 0x00000000
   Number of opaque area LSA 0. Checksum Sum 0x00000000

sgzls1870d# show ip ospf vrf anycast interface
VRF Name: anycast
eth1 is up
  ifindex 3, MTU 1500 bytes, BW 10000 Mbit <UP,BROADCAST,RUNNING,MULTICAST>
  Internet Address 10.32.55.20/26, Broadcast 10.32.55.63, Area 0.0.0.32
  MTU mismatch detection: enabled
  Router ID 10.32.55.20, Network Type BROADCAST, Cost: 10
  Transmit Delay is 1 sec, State DROther, Priority 0
  No backup designated router on this network
  Multicast group memberships: OSPFAllRouters
  Timer intervals configured, Hello 1s, Dead 5s, Wait 5s, Retransmit 3
    Hello due in 0.625s
  Neighbor Count is 3, Adjacent neighbor count is 0
  Cryptographic authentication enabled
  Algorithm:MD5
lo.0 is up
  ifindex 12, MTU 1500 bytes, BW 0 Mbit <UP,BROADCAST,RUNNING,NOARP>
  This interface is UNNUMBERED, Area 0.0.0.32
  MTU mismatch detection: enabled
  Router ID 10.32.55.20, Network Type BROADCAST, Cost: 10
  Transmit Delay is 1 sec, State DR, Priority 1
  Designated Router (ID) 10.32.55.20 Interface Address 10.255.253.20/32
  No backup designated router on this network
  Multicast group memberships: <None>
  Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
    No Hellos (Passive interface)
  Neighbor Count is 0, Adjacent neighbor count is 0

OSPF neighbors are showing up in Init state but not forming OSPF adjacencies:

sgzls1870d# show ip ospf vrf anycast neighbor
VRF Name: anycast

Neighbor ID     Pri State           Up Time         Dead Time Address         Interface                        RXmtL RqstL DBsmL
10.32.55.12       0 Init/DROther    1m45s              4.895s 10.32.55.12     eth1:10.32.55.20                     0     0     0
10.32.32.26     250 Init/DROther    1m44s              4.246s 10.32.55.60     eth1:10.32.55.20                     0     0     0
10.32.32.27     200 Init/DROther    1m44s              4.488s 10.32.55.61     eth1:10.32.55.20                     0     0     0

In debug mode, it appears that HELLO packets are getting sent to the multicast address:

sgzls1870d# debug ospf pack hello send
sgzls1870d# terminal monitor
2023-08-02 09:27:39.914 [DEBG] ospfd: [GP5SX-XSB6D] Hello sent to [224.0.0.5] via [eth1:10.32.55.20].
2023-08-02 09:27:40.914 [DEBG] ospfd: [GP5SX-XSB6D] Hello sent to [224.0.0.5] via [eth1:10.32.55.20].
2023-08-02 09:27:41.914 [DEBG] ospfd: [GP5SX-XSB6D] Hello sent to [224.0.0.5] via [eth1:10.32.55.20].
2023-08-02 09:27:42.914 [DEBG] ospfd: [GP5SX-XSB6D] Hello sent to [224.0.0.5] via [eth1:10.32.55.20].
2023-08-02 09:27:43.914 [DEBG] ospfd: [GP5SX-XSB6D] Hello sent to [224.0.0.5] via [eth1:10.32.55.20].
2023-08-02 09:27:44.914 [DEBG] ospfd: [GP5SX-XSB6D] Hello sent to [224.0.0.5] via [eth1:10.32.55.20].

However, a tcpdump on the server does not show any packets originating from the interface IP address:

[root@sgzls1870d ~]# tcpdump -i eth1 -n
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), snapshot length 262144 bytes
09:28:07.792176 IP 10.32.55.60 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:08.034426 IP 10.32.55.61 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:08.441171 IP 10.32.55.12 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:08.792291 IP 10.32.55.60 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:09.034392 IP 10.32.55.61 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:09.442920 IP 10.32.55.12 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:09.792203 IP 10.32.55.60 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:10.034371 IP 10.32.55.61 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:10.441302 IP 10.32.55.12 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:10.792196 IP 10.32.55.60 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:11.034394 IP 10.32.55.61 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:11.441239 IP 10.32.55.12 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:11.792201 IP 10.32.55.60 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:11.812468 ARP, Request who-has 10.32.55.61 tell 10.32.55.20, length 28
09:28:11.812513 ARP, Request who-has 10.32.55.60 tell 10.32.55.20, length 28
09:28:11.812521 ARP, Request who-has 10.32.55.12 tell 10.32.55.20, length 28
09:28:11.812668 ARP, Reply 10.32.55.61 is-at d4:af:f7:77:02:1b, length 46
09:28:11.812669 ARP, Reply 10.32.55.60 is-at 74:83:ef:1e:d4:ad, length 46
09:28:11.812801 ARP, Reply 10.32.55.12 is-at 00:50:56:a0:ef:0d, length 46
09:28:12.034389 IP 10.32.55.61 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:12.441014 IP 10.32.55.12 > 224.0.0.5: OSPFv2, Hello, length 52
09:28:12.792231 IP 10.32.55.60 > 224.0.0.5: OSPFv2, Hello, length 52

Versions:

• OS Version: Rocky 9
• Kernel: 5.14.0-70.26.1.el9_0.x86_64
• FRR Version: 8.5.2

[matthewc97]

Forgot to mention that firewalld is not running and iptables rules are empty:

[root@sgzls1870d ~]# systemctl status firewalld
○ firewalld.service - firewalld - dynamic firewall daemon
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
     Active: inactive (dead)
       Docs: man:firewalld(1)
[root@sgzls1870d ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Not sure if there could be anything blocking OSPF traffic