Creating an OSPF area

You can create an OSPF area in a network template or on an NGFW device: An OSPF area created in a network template is automatically created on all NGFW devices that use this network template.

To create an OSPF area:

  1. In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW section.
  2. Go to the OSPF section of settings in one of the following ways:
    • If you want to create an OSPF area in a network template, open the Network templates menu tab, click a network template, select the Routing → OSPF section, then select the Areas tab.
    • If you want to create an OSPF area on a device, select the Devices tab, click the device, select the Routing → OSPF section, then select the Areas tab and enable the Override toggle switch.

    A table of OSPF areas is displayed.

  3. Click + Create.
  4. This opens a window; in that window, in the Area ID field, enter the OSPF area ID as an IPv4 address or an integer number.
  5. If you want to make the OSPF area a stub area:
    1. Enable the Stub toggle switch. This toggle switch is disabled by default.
    2. In the Area type drop-down list, select the type of the stub OSPF area:
      • Stub
      • Stub no-summary
      • NSSA
      • NSSA no-summary
    3. If you in the Area type drop-down list, you selected NSSA or NSSA no-summary, if necessary, enable the NSSA Suppress FA toggle switch to prevent the default route 0.0.0.0/0 from being advertised to the NSSA area. This toggle switch is disabled by default.
    4. In the Default cost field, enter a metric for the default route or for summary routes. Range of values: 0 to 16 777 215.
  6. If you want to use the shortcut method for SPF calculations, enable the Shortcut toggle switch. This toggle switch is disabled by default.
  7. In the Authentication drop-down list, select an OSPF authentication method:
    • None to not use authentication. This is the default setting.
    • Message digest to use the MD5 algorithm.
    • Simple password to use a plain-text password. This authentication method is less secure than MD5 algorithm, however, it can provide authentication when used in a trusted network environment.
  8. If you want to specify OSPF ranges:
    1. Select the OSPF ranges tab.
    2. Click + Add.

      This opens the workspace for adding a range.

    3. In the Range field, enter the IPv4 prefix of the routes.
    4. In the Action drop-down list, select the action to perform with routes:
      • Not advertise if you do not want to advertise routes over the OSPF protocol. This is the default setting.
      • Advertise if you want to advertise routes over the OSPF protocol.
      • Substitute to replace the IPv4 prefix of the routes with the specified IPv4 prefix, and then advertise these over the OSPF protocol.

        If you select this value, in the Substitute field, enter the IPv4 prefix of the routes.

    5. If in the Action drop-down list, you selected Advertise or Substitute, in the Cost field, enter a metric for routes. Range of values: 0 to 16 777 215.

    The OSPF range is specified and displayed in the table on the OSPF ranges tab. You can specify multiple OSPF ranges or delete OSPF ranges. To delete an OSPF range, select it in the table and click the Delete button.

  9. If you want to connect an OSPF area to another OSPF area through a transit OSPF area, specify the virtual link:
    1. Click the Virtual links tab.
    2. Click + Add.
    3. In the IP address field, enter the IPv4 address of the network interface of the router in the transit area.

    The virtual link is specified and displayed in the table on the Virtual links tab. You can specify multiple virtual links or delete virtual links. To delete a virtual link, select it in the table and click the Delete button.

  10. If you want to configure route filtering for the OSPF area:
    1. Select the Filtering tab.
    2. In the Export list drop-down list, select an access control list for routes that are advertised from the OSPF area to other OSPF areas.
    3. In the Import list drop-down list, select an access control list for routes that are advertised from other OSPF area to the given OSPF area.
    4. In the Outbound filter list drop-down list, select a prefix list for routes that are advertised from the OSPF area to other OSPF areas.
    5. In the Inbound filter list drop-down list, select a prefix list for routes that are advertised from other OSPF area to the given OSPF area.
  11. Click Create.

    The OSPF area is created and displayed in the table.

  12. In the lower part of the settings area, click Save.
Page top