Kaspersky SD-WAN

Creating an OSPF interface

Expand all | Collapse all

You can create an OSPF interface on an individual CPE device or on all devices that use the CPE template. OSPF interfaces are created on top of network interfaces, so you must first create a network interface.

To create an OSPF interface, use the following instructions:

• Creating an OSPF interface on an individual CPE device.

  To create an OSPF interface on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

     By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Interfaces tab.

     A table of OSPF interfaces is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click + Configure OSPF Interface.
  6. This opens a window, in that window, in the Interface drop-down list, select a previously created network interface on top of which you want to create the OSPF interface.
  7. In the OSPF Area field, enter the ID of the OSPF area to which the interface belongs, as an IPv4 address or an integer number.
  8. If necessary, configure OSPF authentication:
     1. In the Authentication drop-down list, select an authentication method:
        • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
        • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
     2. If in the Authentication drop-down list, you selected Message Digest, in the Password field, enter an authentication password.
     3. If in the Authentication drop-down list, you selected Message Digest, follow these steps:
        1. In the Key ID field, enter the MD5 hash. Range of values: 1 to 255.
        2. In the Key field, enter the MD5 key.
  9. In the Cost field enter the metric of the interface. Range of values: 1 to 65,535.
  10. In the Network Type drop-down list, select the type of the network associated with the interface:
      • broadcast
      • non-broadcast
      • point-to-multipoint
      • point-to-point
  11. In the Priority field, enter the priority of the interface. The CPE device with the highest interface priority becomes the designated router, while the device with the second highest priority becomes the backup designated router.
  12. If you need to switch the interface to passive mode, select the Passive Interface check box. In passive mode, interfaces do not send OSPF hello packets and do not actively participate in OSPF routing. As a rule, interfaces that do not need routing updates, such as interfaces connected to user devices or networks that are not part of the OSPF domain, are switched to passive mode.
  13. To use the BFD protocol to detect loss of connectivity, select the BFD check box. This check box is cleared by default.
  14. If necessary, configure OSPF timers:
      1. Select the OSPF Timers check box. This check box is cleared by default.
      2. In the Hello (sec.) field, enter the period, in seconds, of the interface sending hello messages. Range of values: 1 to 65,535.
      3. In the Dead (sec.) field, enter the time in seconds for which the interface must wait to receive hello messages from OSPF peers. If no hello messages are received from the peer within the specified time, the interface considers the peer unavailable. Range of values: 1 to 65,535.
  15. In the Retransmit Interval (sec.) field, enter the time after which lost packets must be resent. Range of values: 1 to 65,535.
  16. In the Transmit Delay (sec.) field, enter the delay in seconds before the first OSPF packet is sent. Range of values: 1 to 65,535.
  17. Click Save.

      The OSPF interface is created and displayed in the table.

  18. In the upper part of the settings area, click Save to save the configuration of the CPE device.
• Creating an OSPF interface on all devices that use the CPE template.

  To create an OSPF interface on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN section.

     By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Interfaces tab.

     A table of OSPF interfaces is displayed.

  4. Click + Configure OSPF Interface.
  5. This opens a window, in that window, in the Interface drop-down list, select a previously created network interface on top of which you want to create the OSPF interface.
  6. In the OSPF Area field, enter the ID of the OSPF area to which the interface belongs, as an IPv4 address or an integer number.
  7. If necessary, configure OSPF authentication:
     1. In the Authentication drop-down list, select an authentication method:
        • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
        • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
     2. If in the Authentication drop-down list, you selected Message Digest, in the Password field, enter an authentication password.
     3. If in the Authentication drop-down list, you selected Message Digest, follow these steps:
        1. In the Key ID field, enter the MD5 hash. Range of values: 1 to 255.
        2. In the Key field, enter the MD5 key.
  8. In the Cost field enter the metric of the interface. Range of values: 1 to 65,535.
  9. In the Network Type drop-down list, select the type of the network associated with the interface:
     • broadcast
     • non-broadcast
     • point-to-multipoint
     • point-to-point
  10. In the Priority field, enter the priority of the interface. The CPE device with the highest interface priority becomes the designated router, while the device with the second highest priority becomes the backup designated router.
  11. If you need to switch the interface to passive mode, select the Passive Interface check box. In passive mode, interfaces do not send OSPF hello packets and do not actively participate in OSPF routing. As a rule, interfaces that do not need routing updates, such as interfaces connected to user devices or networks that are not part of the OSPF domain, are switched to passive mode.
  12. To use the BFD protocol to detect loss of connectivity, select the BFD check box. This check box is cleared by default.
  13. If necessary, configure OSPF timers:
      1. Select the OSPF Timers check box. This check box is cleared by default.
      2. In the Hello (sec.) field, enter the period, in seconds, of the interface sending hello messages. Range of values: 1 to 65,535.
      3. In the Dead (sec.) field, enter the time in seconds for which the interface must wait to receive hello messages from OSPF peers. If no hello messages are received from the peer within the specified time, the interface considers the peer unavailable. Range of values: 1 to 65,535.
  14. In the Retransmit Interval (sec.) field, enter the time after which lost packets must be resent. Range of values: 1 to 65,535.
  15. In the Transmit Delay (sec.) field, enter the delay in seconds before the first OSPF packet is sent. Range of values: 1 to 65,535.
  16. Click Save.

      The OSPF interface is created and displayed in the table.

  17. In the upper part of the settings area, click Save to save the configuration of the CPE template.