Normal

—There are no restrictions; the area can carry all types of routes.

Stub

—There is no outlet from the area. To reach a destination outside of the area, it is necessary to go through the border, which connects to other areas. If you select this option, select

Accept Summary

if you want to accept this type of link state advertisement (LSA) from other areas. Also, specify whether to include a default route LSA in advertisements to the stub area along with the associated metric value (range is 1-255).

NSSA

(Not-So-Stubby Area)—It is possible to leave the area directly, but only by routes other than OSPF routes. If you select this option, select

Accept Summary

if you want to accept this type of LSA. Select

Advertise Default Route

to specify whether to include a default route LSA in advertisements to the stub area along with the associated metric value (1-255). Also, select the route type used to advertise the default LSA. Click

Add

in the

External Ranges

section and enter ranges if you want to enable or suppress advertising external routes that are learned through NSSA to other areas.

Interface

—Choose the interface.

Enable

—Cause the OSPF interface settings to take effect.

Passive

—Select if you do not want the OSPF interface to send or receive OSPF packets. Although OSPF packets are not sent or received if you choose this option, the interface is included in the LSA database.

Link type

—Choose

Broadcast

if you want all neighbors that are accessible through the interface to be discovered automatically by multicasting OSPF hello messages, such as an Ethernet interface. Choose

p2p

(point-to-point) to automatically discover the neighbor. Choose

p2mp

(point-to-multipoint) when neighbors must be defined manually. Defining neighbors manually is allowed only for p2mp mode.

Metric

—Enter the OSPF metric for this interface (0-65,535).

Priority

—Enter the OSPF priority for this interface (0-255). It is the priority for the router to be elected as a designated router (DR) or as a backup DR (BDR) according to the OSPF protocol. When the value is zero, the router will not be elected as a DR or BDR.

Auth Profile

—Select a previously-defined authentication profile.

BFD

—To enable Bidirectional Forwarding Detection (BFD) for an OSPF peer interface (and thereby override the

BFD

setting for OSPF, as long as

BFD

is not disabled for OSPF at the virtual router level), select one of the following:

Hello Interval (sec)

—Interval, in seconds, at which the OSPF process sends hello packets to its directly connected neighbors (range is 0-3600; default is 10).

Dead Counts

—Number of times the hello interval can occur for a neighbor without OSPF receiving a hello packet from the neighbor, before OSPF considers that neighbor down. The

Hello Interval

multiplied by the

Dead Counts

equals the value of the dead timer (range is 3-20; default is 4).

Retransmit Interval (sec)

—Length of time, in seconds, that OSPF waits to receive a link-state advertisement (LSA) from a neighbor before OSPF retransmits the LSA (range is 0-3,600; default is 10).

Transit Delay (sec)

—Length of time, in seconds, that an LSA is delayed before it is sent out of an interface (range is 0-3,600; default is 1).

Graceful Restart Hello Delay (sec)

—Applies to an OSPF interface when Active/Passive High Availability is configured.

Graceful Restart Hello Delay

is the length of time during which the firewall sends Grace LSA packets at 1-second intervals. During this time, no hello packets are sent from the restarting firewall. During the restart, the dead timer (which is the

Hello Interval

multiplied by the

Dead Counts

) is also counting down. If the dead timer is too short, the adjacency will go down during the graceful restart because of the hello delay. Therefore, it is recommended that the dead timer be at least four times the value of the

Graceful Restart Hello Delay

. For example, a

Hello Interval

of 10 seconds and a

Dead Counts

of 4 yield a dead timer of 40 seconds. If the

Graceful Restart Hello Delay

is set to 10 seconds, that 10-second delay of hello packets is comfortably within the 40-second dead timer, so the adjacency will not time out during a graceful restart (range is 1-10; default is 10).