Next-Generation Firewall
Network > Routing > Logical Routers > OSPF
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
-
-
-
-
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1
Network > Routing > Logical Routers > OSPF
Description of OSPF fields for a logical router on an
Advanced Routing Engine.
The table describes the settings to configure OSPFv2 areas
for a logical router on an Advanced Routing Engine.
OSPF Settings | Description |
---|---|
Enable | Enable OSPF for the logical router. |
Router ID | Enter a router ID in the format of an IPv4 address. |
BFD Profile | If you want to apply Bidirectional Forwarding Detection
to OSPF, select a BFD profile or create a new one. Default is None
(Disable BFD). |
Global General Timer | Select a Global Timer profile or create
a new one to apply to OSPF. |
Global Interface Timer | Select an OSPF Interface Timer or create
a new one to apply to OSPF. |
Redistribution Profile | Select an OSPF Redistribution profile or
create a new one to redistribute IPv4 static routes, connected routes,
IPv4 BGP routes, or the IPv4 default route to the OSPF link-state
database. |
Area | |
Area ID | Add an area identified by its Area ID in
x.x.x.x format. This is the identifier that each neighbor must accept
to be part of the same area. |
Type | |
Authentication | Select an Authentication profile or create
a new one. |
Type | Select the type of OSPF area:
|
no-summary | (Stub and NSSA areas only) Select
to prevent the area from receiving Type 3 Summary LSAs and thereby
reduce traffic in the area. |
Default information originate | (NSSA areas only) Select to cause
OSPF to originate a default route. |
Metric | (NSSA areas only) Enter a metric
for the default route; range is 1 to 16,777,214; default is 10. |
Metric-type | (NSSA areas only) Type 1 or Type
2 |
ABR | Select if the logical router is an Area
Border Router, which allows the next four fields to be configured. |
Import-list | Select an access list or create a new one
to filter network routes coming into the area based on IPv4 source
address. |
Export-list | Select an access list or create a new one
to filter network routes that originated in the area, to allow or prevent
the routes from being advertised to other areas. |
Inbound Filter-List | Select a prefix list or create a new one
to filter network prefixes coming into the area. |
Outbound Filter-List | Select a prefix list or create a new one
to filter network prefixes that originated in the area, to prevent the
routes from being advertised to other areas. |
IPv4 Prefix | (NSSA areas only) If ABR is
selected and area type is NSSA, Add an
IPv4 prefix to summarize a group of external subnets into a single Type-7
LSA, which is then translated to a Type-5 LSA and advertised to
the backbone when you select Advertise. |
Range | |
IP Address/Netmask | Add an IP Address/Netmask. A Type-3 Summary LSA
(link-state advertisement) with routing information matching this
range is announced into the backbone area if the area contains at
least one intra-area network (that is, described with router or
network LSA) from this range). |
Substitute | Enter a substitute IPaddress/netmask so
that a Type-3 Summary LSA with this IP address/netmask is announced
into the backbone if the area contains at least one intra-area network
from the IP Address/netmask specified. |
Advertise | Select to send LSAs that match the subnet. |
Interface | |
Interface | Add each interface to be included in the
area. |
Enable | Enable the interface. |
MTU Ignore | Select to ignore maximum transmission unit
(MTU) mismatches when trying to establish an adjacency (default
is disabled; MTU match checking occurs). RFC 2328 defines the interface
MTU as “The size in bytes of the largest IP datagram that can be
sent out the associated interface, without fragmentation.” |
Passive | Select to prevent the interface from sending
or receiving OSPF packets; however, the interface is still included
in the link-state database. You can make an interface passive, for
example, if it connects to a switch, because you don’t want to send
Hello packets where there is no router. |
Link Type | Select the link type:
|
Priority | Enter the priority for the interface; the
priority for the router to be elected as a designated router (DR)
or backup DR (BDR); range is 0 to 255; default is 1. If zero is
configured, the router will not be elected as DR or BDR. |
Timer Profile | Select a Timer Profile or create a new one
to apply to the interface. This profile overrides the Global Interface
Timer profile applied to OSPF. |
Authentication | Select an Authentication Profile or create
a new one to apply to the interface. This profile overrides the Authentication
profile applied on the Type tab. |
BFD Profile | Select a BFD Profile or Inherit-vr-global-setting (default)
or create a new BFD profile or select None (Disable BFD).
This profile overrides the profile configured for OSPF. |
Cost | Specify a cost for the interface; range
is 1 to 65,535; default is 10. |
Virtual Link | |
Name | Enter a name for the virtual link. |
Enable | Enable the virtual link. |
Area | |
Router ID | |
Timer Profile | Select a Timer Profile or create a new one
to apply to the virtual link. This profile overrides the Global Interface
Timer profile applied to OSPF. |
Authentication | Select an Authentication Profile or create
a new one to apply to the virtual link. This profile overrides the Authentication
profile applied on the Type tab. |
Advanced | |
rfc-1583 compatibility | Select to enforce compatibility with RFC
1583, which allows one best route to an autonomous system boundary
router (ASBR) in the OSPF routing table. Default is disabled, which
means the OSPF routing table can maintain multiple intra-AS paths
in the routing table, thereby preventing routing loops. |
Graceful Restart—Enable Graceful Restart | Enable Graceful Restart for the logical
router; default is enabled. |
Enable Helper Mode | Enable Graceful Restart Helper Mode for
the logical router; default is enabled. |
Enable Strict LSA Checking | Enable Strict LSA Checking to cause the
helper router to stop performing helper mode and causes the graceful
restart process to stop if a link-state advertisement indicates
a network topology change; default is enabled. |
Grace Period (sec) | Specify the number of seconds within which
the logical router will perform a graceful restart if the firewall goes
down or becomes unavailable. Range is 5 to 1,800; default is 120. |
Max Neighbor Restart Time (sec) | Range is 5 to 1,800; default is 140. |