Next-Generation Firewall
Configure OSPF
Table of Contents
Configure OSPF
Determine routes dynamically by obtaining information
from others routers advertising routes to other routes.
Contact your account team to enable Cloud Management for NGFWs using
Strata Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
One of these:
|
Configure Open Shortest Path First (OSPF) for enable your logical router to determine the
most cost efficient links to a traffic destination. OSPF determines routes
dynamically by obtaining information from other routers and advertising routes to
other routers by way of Link State Advertisements (LSA). The router keeps
information about the links between it and the destination to make highly efficient
routing decisions. A cost is assigned to each router interface, and the best routes
are determined to be those with the lowest cost, when summed over all the
encountered outbound interfaces and the interface receiving the LSA.
- Log in to Strata Cloud Manager.Select and select the Configuration Scope where you want to configure OSPF for a logical router.You can select a folder or firewall from your Folders or select Snippets to configure OSPF for a logical router in a snippet.The number of logical routers supported varies based on the firewall model. If you create multiple logical routers for a folder or snippet, verify that the firewalls associated with the folder or snippet support the number of logical routers you configure.Configure a Logical Router.Edit the OSPF settings.Enable OSPF.Enter the Router ID.Select a predefined BFD Profile.Bidirectional Forwarding Detection (BFD) profiles allow you to apply BFD settings to a static route or routing protocol. Default is None (Disable BFD).Add OSPF Areas enter an Area ID in x.x.x.x format to identify that each neighbor must accept to be part of the same area.OSPF operates within a single autonomous system (AS). Networks within this single AS can be divided into a number of areas. By default Area zero (0) is created and can function alone or act as the OSPF backbone for larger number areas. Each OSPF area is named using a 32-bit identifier that in most cases is written in the same dotted-decimal notation as an IP4 address. For example, Area 0 is written as 0.0.0.0.Save your configured OSPF Areas.Configure OSPF Area Type.
- Select the Authentication profile used to authenticate OSPF messages.Create New to create a new authentication profile.For Inherit, select the BFD profile the OSPF Area.
- Normal—In a normal OSPF area there are no restrictions; the area can carry all types of routes.
- Stub—There’s no outlet from the area. To reach a destination outside of the area, it’s necessary to go through the border, which connects to other areas. If you select this option, configure the following:
- No Summary—If enabled, the OSPF area behaves as a Totally Stubby Area (TSA) and the Area Border Router (ABR) doesn’t propagate summary link stats advertisements (LSA).
- NSSA (Not-So-Stubby Area)—The firewall can leave the area only by routes other than OSPF routes. If you select this option, configure the following:
- No Summary—If enabled, the OSPF area behaves as a Totally Stubby Area (TSA) and the Area Border Router (ABR) doesn’t propagate summary link stats advertisements (LSA).
- Default Information Originate—
- Address Range for Summary External Routes—Add ranges of external routes that you want to Advertise or for which you want to suppress advertising (disable Advertise).
Configure the OSPF Area Range.- Add aggregate LSA destination addresses in the area into subnets.Advertise or suppress (disable Advertise) advertising LSAs that match the subnet.Configure the OSPF Area Interface.
- Select an Interface.Enable to allow the OSPF interface settings to take effect.Enable MTU Ignore to ignore maximum transmission unit (MTU) mismatches when trying to establish an adjacency.Enable Passive if you don’t want the OSPF interface to send or receive OSPF packets. Although OSPF packets aren’t sent or received if you choose this option, the interface is included in the LSA database.Enter the OSPF Priority for the interface. This is the priority for the router to be elected as a designated router (DR) or as a backup DR (BDR).Range is 0-255; default is 1. If zero is configured, the router isn’t selected as a DR or BDR.Select the same Authentication Profile you selected in the previous step.Select the BFD Profile.Enter the Cost.Select the Inherit.Save.Save the OSPF configuration.Save the logical router configuration.Push Config to push your configuration changes.
