12.03.2015 Views

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

OSPF<br />

Router Dynamic<br />

Figure 154:New/Edit RIP Interface<br />

Interface<br />

Send Version,<br />

Receive Version<br />

Authentication<br />

Passive Interface<br />

Select the name of the <strong>FortiGate</strong> interface to which these settings<br />

apply. The interface must be connected to a RIP-enabled network.<br />

The interface can be a virtual IPSec or GRE interface.<br />

Select to override the default RIP-<strong>com</strong>patibility setting for sending<br />

and receiving updates through the interface: RIP version 1, version 2<br />

or Both.<br />

Select an authentication method for RIP exchanges on the specified<br />

interface:<br />

• Select None to disable authentication.<br />

• If the interface is connected to a network that runs RIP version 2,<br />

optionally select Text and type a password (up to 35 characters)<br />

in the Password field. The <strong>FortiGate</strong> unit and the RIP updates<br />

router must both be configured with the same password. The<br />

password is sent in clear text over the network.<br />

• Select MD5 to authenticate the exchange using MD5.<br />

Select to suppress the advertising of <strong>FortiGate</strong> routing information<br />

through the specified interface. For the interface to respond to RIP<br />

requests, clear Passive Interface.<br />

OSPF<br />

OSPF autonomous systems<br />

Open shortest path first (OSPF) is a link-state routing protocol that is most often<br />

used in large heterogeneous networks to share routing information among routers<br />

in the same Autonomous System (AS). <strong>FortiGate</strong> units support OSPF version 2<br />

(see RFC 2328).<br />

Note: Basic OSPF routing options can be configured through the web-based manager.<br />

Many additional options may be configured through CLI <strong>com</strong>mands only. For <strong>com</strong>plete<br />

descriptions and examples of how to use CLI <strong>com</strong>mands to configure OSPF settings, see<br />

the “router” chapter of the <strong>FortiGate</strong> CLI Reference.<br />

An OSPF AS is typically divided into logical areas linked by area border routers.<br />

An area <strong>com</strong>prises a group of contiguous networks. An area border router links<br />

one or more areas to the OSPF network backbone (area ID 0). To specify the<br />

characteristics of an OSPF AS, see “Defining an OSPF AS” on page 249.<br />

When the <strong>FortiGate</strong> unit has an interface to an OSPF area, it can participate in<br />

OSPF <strong>com</strong>munications. The <strong>FortiGate</strong> unit uses the OSPF Hello protocol to<br />

acquire neighbors in an area. A neighbor is any router that has an interface to the<br />

same area as the <strong>FortiGate</strong> unit. After initial contact, the <strong>FortiGate</strong> unit exchanges<br />

Hello packets with its OSPF neighbors regularly to confirm that the neighbors can<br />

be reached.<br />

<strong>FortiGate</strong> Version 3.0 MR5 <strong>Administration</strong> <strong>Guide</strong><br />

248 01-30005-0203-20070830

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!