← Module 03 · Layer 3: Network

Link-State Routing (OSPF, IS-IS)

Instead of trusting a neighbor's secondhand distance, every router gets the same full map and draws its own route across it.

Everyone gets the same map

The previous topic's distance-vector routers only know direction and distance, secondhand, from their neighbors. A link-state router does something fundamentally different: it floods a small description of its own directly-connected links (an LSA, Link-State Advertisement) to the entire routing domain, and receives everyone else's in return. Every router ends up holding an identical, complete map of the topology, and independently runs Dijkstra's shortest path algorithm on that map to compute its own best route to everywhere.

Nobody is trusting a rumor anymore. Every router has the actual map and draws its own path, the way two people using the same detailed city map might still choose different routes depending on where they're each starting from.

R1 R2 R3 R4 R5 R1's LSA reaches every other router, and every router floods its own the same way
Link-state flooding: everyone eventually holds the same map of the whole topology, not just their own neighbors' opinions.

OSPF and areas

Flooding the entire topology to every router works fine on a small network, but scales badly for the same reason a single giant broadcast domain does: too much update traffic, too much CPU (Central Processing Unit) spent recomputing paths every time anything, anywhere, changes. OSPF's (Open Shortest Path First) fix is areas: the topology gets split into Area 0 (the mandatory "backbone") plus additional numbered areas connected to it. Full LSA flooding only happens within an area; between areas, routers exchange summarized reachability information instead of the raw topology. OSPF's cost metric itself is based on interface bandwidth: lower cost for faster links.

Why multi-access segments elect a DR and BDR

On a point-to-point link, two routers just become neighbors directly, nothing else to coordinate. On a shared multi-access segment, like five routers plugged into the same Ethernet VLAN, letting every router form a full-mesh adjacency with every other router means the same LSA gets flooded and re-flooded redundantly across every link, and the number of adjacencies grows roughly with the square of the router count. At 10 routers on one segment, that's 45 pairwise adjacencies to maintain.

OSPF avoids that by electing one Designated Router (DR) and one Backup Designated Router (BDR) for the segment. Every other router, a DROTHER, forms an adjacency with only the DR and the BDR, never with each other, and the DR does the actual work of flooding LSAs out to the rest of the segment on everyone's behalf. The BDR just shadows the DR, ready to take over instantly if it fails. Election is priority-based: highest configured OSPF priority becomes DR, second-highest becomes BDR, and a tie is broken by the highest Router ID. Setting a router's priority to 0 removes it from the election entirely.

WITHOUT DR/BDR R1 R2 R3 R4 6 adjacencies, everyone floods to everyone WITH DR/BDR DR BDR R3 R4 5 adjacencies, R3/R4 never peer directly
Same four routers, same segment. On the right, R3 and R4 (DROTHERs) only exchange LSAs through the DR and BDR, never with each other, which is the difference that actually matters as the segment grows.

How routes cross from one area into another

Full LSA flooding never leaves its own area; a router in Area 2 never sees Area 1's raw Router and Network LSAs directly. Instead, the Area Border Router (ABR) sitting on the boundary between Area 1 and the backbone takes everything it learned inside Area 1, collapses it down to a list of reachable subnets and their cost, and injects that as a Type 3 Summary LSA into Area 0. Any other ABR attached to the backbone can then re-advertise that same summary into whatever area it borders, one hop of summarization at a time. The far side of the network never has to know Area 1's actual internal topology, just which subnets live there and roughly how far away they are.

AREA 1 R1a R1b detailed LSAs, contained ABR1 AREA 0, BACKBONE ABR2 AREA 2 R2a Type 3: 10.1.0.0/16
Area 1's detailed topology never crosses into the backbone. ABR1 collapses it into one summary route, and ABR2 passes that summary on into Area 2, one re-advertisement at a time.
WHY THIS MATTERS FOR TROUBLESHOOTING

Because an inter-area route only ever carries a summarized cost, not the real path, a router outside Area 1 can't tell whether that cost went up because of an actual link failure inside Area 1 or just a naturally longer internal detour. All it sees is the number ABR1 advertised. This is also exactly why OSPF's SPF recalculation stays contained: a link flapping inside Area 1 only triggers a fresh Dijkstra run for routers inside Area 1, not the whole network.

IS-IS: The same idea, a different lineage

IS-IS (Intermediate System to Intermediate System) is conceptually very close to OSPF, link-state, Dijkstra, the works, but comes from the OSI (Open Systems Interconnection) protocol suite rather than the IP (Internet Protocol) world, and organizes its hierarchy into Level 1 and Level 2 routers instead of numbered areas. It's less common in enterprise networks than OSPF, but it's the backbone protocol of choice inside many large service-provider networks.

OSPFIS-IS
HierarchyAreas (Area 0 backbone)Levels (L1 / L2)
Runs overDirectly over IPDirectly over the data link layer, not IP
Most common inEnterprise networksLarge service-provider backbones
A FAMILIAR REASON FOR THE HIERARCHY

OSPF splitting the topology into areas is the same underlying instinct as VLANs splitting a switch into smaller broadcast domains: contain how far a piece of "everyone needs to know this" information has to spread, so the network keeps scaling instead of drowning in its own updates.