Kaspersky SD-WAN

Creating an OSPF area

Expand all | Collapse all

You can create an OSPF area on an individual CPE device or on all devices that use the CPE template. If you plan to use route filtering, before creating an area, you must do the following:

• Create access control lists.
• Create prefix lists.

To create an OSPF area, use the following instructions:

• Creating an OSPF area on an individual CPE device.

  To create an OSPF area on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

     By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Areas tab.

     A table of OSPF areas is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click + Configure OSPF Area.
  6. This opens a window; in that window, in the Name field, enter the area ID as an IPv4 address or an integer number.
  7. If necessary, make the area a stub area:
     1. Select the Stub check box. This check box is cleared by default.
     2. In the Area Type drop-down list, select a stub area type:
        • Stub
        • STUB NO-SUMMARY
        • NSSA
        • NSSA NO-SUMMARY
     3. If the Area Type drop-down list, you selectedNSSA or NSSA NO-SUMMARY, if you need to prevent the propagation of the default route to the NSSA area, select the NSSA Suppress FA check box. This check box is cleared by default.
     4. In the Default Cost field, enter a metric for the default route or for summary routes.
  8. If you need to use the shortcut method when performing the SPF algorithm calculations, select the Shortcut check box. This method helps reduce the amount of computation by excluding certain areas. This check box is cleared by default.
  9. In the Authentication drop-down list, select the OSPF authentication method:
     • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
     • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
  10. If necessary, under OSPF Ranges, add a range of IP addresses and allow or prohibit advertising of addresses from this range in OSPF:
      1. Click + Range.
      2. In the Range field, enter a range of IP addresses. The range is specified using a prefix.
      3. In the Action drop-down list, select the action that you want to apply to IP addresses from the range:
         • Advertise to advertise in OSPF. This is the default setting.
         • Not Advertise to not advertise in OSPF.
         • Substitute to substitute with IP addresses from a different range and advertise in OSPF.
      4. If the Action drop-down list, you selected Substitute, in the Substitute field, enter the range of IP addresses that you want to substitute the original range with.
      5. If in the Action drop-down list, you selected Advertise or Substitute, in the Cost field, enter a metric for IP addresses in the range. Range of values: 0 to 16,777,215.
  11. If necessary, under Virtual Links, add a virtual communication channel to connect the area you are creating to another area through the transit area:
      1. Click + Virtual Link.
      2. In the Address field, enter the IPv4 address of the router interface in the transit area.
  12. If necessary, under Filtering, configure route filtering in OSPF:
      1. In the Export List drop-down list, select a previously created access control list to filter routes advertised to other areas.
      2. In the Import List drop-down list, select a previously created access control list to filter routes advertised from other areas.
      3. In the Outbound Filter List drop-down list, select a previously created prefix list to filter routes advertised to other areas.
      4. In the Inbound Filter List drop-down list, select a previously created prefix list to filter routes advertised from other areas.
  13. Click Save.

      The OSPF area is created and displayed in the table.

  14. In the upper part of the settings area, click Save to save the configuration of the CPE device.
• Creating an OSPF area on all devices that use the CPE template.

  To create an OSPF area on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN → CPE templates subsection.

     A table of CPE templates is displayed.

  2. Click the CPE template.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Areas tab.

     A table of OSPF areas is displayed.

  4. Click + Configure OSPF Area.
  5. This opens a window; in that window, in the Name field, enter the area ID as an IPv4 address or an integer number.
  6. If necessary, make the area a stub area:
     1. Select the Stub check box. This check box is cleared by default.
     2. In the Area Type drop-down list, select a stub area type:
        • Stub
        • STUB NO-SUMMARY
        • NSSA
        • NSSA NO-SUMMARY
     3. If the Area Type drop-down list, you selectedNSSA or NSSA NO-SUMMARY, if you need to prevent the propagation of the default route to the NSSA area, select the NSSA Suppress FA check box. This check box is cleared by default.
     4. In the Default Cost field, enter a metric for the default route or for summary routes.
  7. If you need to use the shortcut method when performing the SPF algorithm calculations, select the Shortcut check box. This method helps reduce the amount of computation by excluding certain areas. This check box is cleared by default.
  8. In the Authentication drop-down list, select the OSPF authentication method:
     • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
     • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
  9. If necessary, under OSPF Ranges, add a range of IP addresses and allow or prohibit advertising of addresses from this range in OSPF:
     1. Click + Range.
     2. In the Range field, enter a range of IP addresses. The range is specified using a prefix.
     3. In the Action drop-down list, select the action that you want to apply to IP addresses from the range:
        • Advertise to advertise in OSPF. This is the default setting.
        • Not Advertise to not advertise in OSPF.
        • Substitute to substitute with IP addresses from a different range and advertise in OSPF.
     4. If the Action drop-down list, you selected Substitute, in the Substitute field, enter the range of IP addresses that you want to substitute the original range with.
     5. If in the Action drop-down list, you selected Advertise or Substitute, in the Cost field, enter a metric for IP addresses in the range. Range of values: 0 to 16,777,215.
  10. If necessary, under Virtual Links, add a virtual communication channel to connect the area you are creating to another area through the transit area:
      1. Click + Virtual Link.
      2. In the Address field, enter the IPv4 address of the router interface in the transit area.
  11. If necessary, under Filtering, configure route filtering in OSPF:
      1. In the Export List drop-down list, select a previously created access control list to filter routes advertised to other areas.
      2. In the Import List drop-down list, select a previously created access control list to filter routes advertised from other areas.
      3. In the Outbound Filter List drop-down list, select a previously created prefix list to filter routes advertised to other areas.
      4. In the Inbound Filter List drop-down list, select a previously created prefix list to filter routes advertised from other areas.
  12. Click Save.

      The OSPF area is created and displayed in the table.

  13. In the upper part of the settings area, click Save to save the configuration of the CPE template.