Formal Models Of The Ospf Routing Protocol