You can create an OSPF interface in a network template or on an NGFW device: An OSPF interface created in a network template is automatically created on all NGFW devices that use this network template.
To create an OSPF interface:
In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW section.
Go to the OSPF section of settings in one of the following ways:
If you want to create an OSPF interface in a network template, open the Network templates menu tab, click a network template, select the Routing → OSPF section, then select the Interfaces tab.
If you want to create an OSPF interface on a device, select the Devices tab, click the device, select the Routing → OSPF section, then select the Interfaces tab and enable the Override toggle switch.
A table of OSPF interfaces is displayed.
Click + Create.
This opens the OSPF interface creation workspace.
This opens a window, in that window, in the Network interface drop-down list, select the created network interface which you want to use as an OSPF interface.
In the OSPF area field, enter the ID of the created OSPF area to which the OSPF interface belongs, as an IPv4 address or an integer number.
If you want to specify OSPF authentication:
In the Authentication drop-down list, select an authentication method:
None to not use authentication. This is the default setting.
Message digest to use the MD5 algorithm.
Simple password to use a plain-text password. This authentication method is less secure than MD5 algorithm, however, it can provide authentication when used in a trusted network environment.
If in the Authentication drop-down list, you selected Simple password, in the Password field, enter the authentication password.
If in the Authentication drop-down list, you selected Message digest, follow these steps:
In the Key ID field, enter the MD5 hash. Range of values: 1 to 255.
In the Key field, enter the MD5 key.
In the Cost field, enter the metric of the OSPF interface. Range of values: 1 to 65,535.
In the Network type drop-down list, select the type of network to which the OSPF interface is connected:
Broadcast
Non broadcast
Point to multipoint
Point to point
In the Priority field, enter the priority of the OSPF interface. The greater the value, the higher the priority of the OSPF interface.
The highest-priority OSPF interface becomes the designated router of the network segment. The OSPF interface with the second highest priority becomes the backup designated router.
If you want to switch the OSPF interface to passive mode, select the Passive interface check box. In passive mode, OSPF interfaces do not exchange traffic packets.
If you want to use the BFD protocol to detect loss of connectivity, select the BFD check box. This check box is cleared by default.
If you want to configure OSPF timers:
Select the OSPF timers check box. This check box is cleared by default.
In the Hello (s) field, enter the time interval in seconds that the OSPF interface uses to send control packets to OSPF neighbors. Range of values: 1 to 65,535.
In the Dead (s) field, enter the time interval in seconds that the OSPF interface uses to receive control packets from OSPF neighbors. If no control packets are received from an OSPF neighbor within the specified time, the OSPF interface considers this OSPF neighbor unavailable. Range of values: 1 to 65,535.
In the Retransmit interval (s) field, enter the time interval in seconds for resending Link State Advertisement (LSA) packets to OSPF neighbors that are behind the OSPF interface. Range of values: 1 to 65,535. For more information, please refer to RFC 2328 (the RxmtInterval parameter).
In the Transmit delay (s) field, enter the estimated time in seconds required to send an LSU (Link State Update) packet through the OSPF interface. Range of values: 1 to 65,535. For more information, please refer to RFC 2328 (the InfTransDelay parameter).
Click Create.
The OSPF interface is created and displayed in the table.
In the lower part of the settings area, click Save.