OSPF and OSPFv3

Specify the global settings you require as follows:

1. Router ID: Enter an ID to identify the firewall as the router from which the packet originates. Make sure the ID meets the following conditions:

   • It must be in the IPv4 address format.
   • It doesn't need to be a valid IP address in your routing domain.
   • It must be unique within your routing domain.
   • You can't use 0.0.0.0.

   If you don't enter a value, the firewall uses the highest interface address.

2. Default metric: Enter a value to use when the firewall redistributes connected, static, RIP, and BGP routes through OSPF, and you haven't configured individual metrics for each route type. Lower cost indicates higher preference.

   If you don't enter a value, the firewall uses the following default value: 20.

3. ABR type: To ensure compatibility, select the Area Border Router (ABR) type in your routing domain from the following options:

   • Standard
   • Cisco
   • IBM
   • Shortcut

4. Auto-cost reference-bandwidth (Mbps): Enter a value to calculate the cost of routing through the firewall. Lower cost indicates higher preference.

   It's divided by the interface speed to calculate the OSPF cost. Default: 100000 Mbps

   Example

   Reference bandwidth = 100000 Mbps

   Interface bandwidth = 2000 Mbps

   Cost = 100000/20000 = 50

   Note

   If you've migrated from an earlier version to 19.5 and later versions, the previous default value (100) is migrated as the current default value (100000). If you've changed the default value in the earlier version, the value is migrated without change.

5. Select the route advertisement settings you require in your network, enter the corresponding metric, and select the metric type from the following options:

   • External type 1: Sum of the internal cost (cost of reaching the ASBR) and external cost to the destination. So, the route cost differs for each router. Use this when you want traffic to go out of the network at the nearest exit point.
   • External type 2: Only the external cost to the destination. So, the route cost is the same for all routers in the OSPF domain. Use this when you want traffic to go out of the network at the point closest to the destination.

   Select the following based on your requirements:

   1. Default-information originate: Advertises the default route (0.0.0.0/0) to neighbors based on the following options:

      • Never: Doesn't advertise the default route.
      • Regular: Advertises it if it's present in the routing table.
      • Always: Always advertises it even if it's not present in the routing table.

   2. Redistribute connected: Redistributes routes for connected networks, including remote access SSL VPN traffic, into the OSPF routing table.

      Note

      Only traffic related to remote access SSL VPN's dynamic subnet is injected into OSPF. The static subnet isn't. You can configure an OSPF network for the static subnet.

      Note

      The firewall redistributes all networks directly attached to it. You can't selectively inject routes from the web admin console.

   3. Redistribute static: Redistributes static routes into the OSPF routing table.

   4. Redistribute RIP: Redistributes RIP routes into the OSPF routing table.
   5. Redistribute BGP: Redistributes BGP routes into the OSPF routing table.

6. Click Apply.

   Note

   When you apply the Global configuration settings on the web admin console, the firewall removes your changes to the default setting log-adjacency-changes.

Networks and areas

You can see the OSPF networks you configured, the corresponding subnet masks, and the area they belong to. See Add an OSPF network.

You can see the OSPF areas, the area and authentication types, area cost, and virtual links if any. See Add OSPF areas.

Override interface configuration

You can manage the interface configuration. See Override interface configuration.

Specify the global settings you require as follows:

1. Router ID: Enter an ID to identify the firewall as the router from which the packet originates. Make sure the ID meets the following conditions:

   • It must be in the IPv4 address format.
   • It doesn't need to be a valid IP address in your routing domain.
   • It must be unique within your routing domain.
   • You can't use 0.0.0.0.

   If you don't enter a value, the firewall uses the highest interface address.

2. Default metric: It's used to determine the best route among the routes redistributed into OSPFv3.

   Currently, you can't change this value, and the value 0 appears, but the firewall uses the following default value: 20.

3. ABR type: The Area Border Router (ABR) type is set to Standard, which complies with RFC 2328. You can't change it.

4. Auto-cost reference-bandwidth (Mbps): Enter a value to calculate the cost of routing through the firewall. Lower cost indicates higher preference.

   It's divided by the interface speed to calculate the OSPFv3 cost. Default: 100000 Mbps

   Example

   Reference bandwidth = 100000 Mbps

   Interface bandwidth = 2000 Mbps

   Cost = 100000/20000 = 50

5. Select the route advertisement settings you require in your network, enter the corresponding metric, and select the metric type from the following options:

   • External type 1: Sum of the internal cost (cost of reaching the ASBR) and external cost to the destination. So, the route cost differs for each router. Use this when you want traffic to go out of the network at the nearest exit point.
   • External type 2: Only the external cost to the destination. So, the route cost is the same for all routers in the OSPF domain. Use this when you want traffic to go out of the network at the point closest to the destination.

   Select the following settings based on your requirements:

   1. Default-information originate: Advertises the default route (0.0.0.0/0) to neighbors based on the following options:

      • Never: Doesn't advertise the default route.
      • Regular: Advertises it if it's present in the routing table.
      • Always: Always advertises it even if it's not present in the routing table.

   2. Redistribute connected: Redistributes routes for connected networks, including remote access SSL VPN traffic, into the OSPFv3 routing table.

   Note

   Only traffic related to remote access SSL VPN's dynamic subnet is injected into OSPFv3. The static subnet isn't. You can configure an OSPF network for the static subnet.

   Note

   The firewall redistributes all networks directly attached to it. You can't selectively inject routes from the web admin console.

6. Click Apply.

Interfaces and areas

You can see the interfaces you've configured to run OSPFv3 and the area the interface belongs to. See Add an OSPFv3 interface.

You can see the OSPF areas you configured on the firewall and the type of area. See Add an OSPFv3 area.