12.03.2015 Views

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Router Dynamic<br />

OSPF<br />

Defining OSPF areas<br />

An area logically defines part of the OSPF AS. Each area is identified by a 32-bit<br />

area ID expressed in decimal dot notation. Area ID 0.0.0.0 is reserved for the<br />

OSPF network backbone. You can classify the remaining areas of an AS in one of<br />

three ways:<br />

• Regular<br />

• Stub<br />

• NSSA<br />

A regular area contains more than one router, each having at least one OSPFenabled<br />

interface to the area.<br />

To reach the OSPF backbone, the routers in a stub area must send packets to an<br />

area border router. Routes leading to non-OSPF domains are not advertised to<br />

the routers in stub areas. The area border router advertises to the OSPF AS a<br />

single default route (destination 0.0.0.0) into the stub area, which ensures that any<br />

OSPF packet that cannot be matched to a specific route will match the default<br />

route. Any router connected to a stub area is considered part of the stub area.<br />

In a Not-So-Stubby Area (NSSA), routes that lead out of the area into a non-<br />

OSPF domain are made known to OSPF AS. However, the area itself continues to<br />

be treated like a stub area by the rest of the AS.<br />

Regular areas and stub areas (including not-so-stubby areas) are connected to<br />

the OSPF backbone through area border routers.<br />

To define an OSPF area, go to Router > Dynamic > OSPF, and then under<br />

Areas, select Create New. To edit the attributes of an OSPF area, go to Router ><br />

Dynamic > OSPF and select the Edit icon in the row that corresponds to the area.<br />

Note: If required, you can define a virtual link to an area that has lost its physical<br />

connection to the OSPF backbone. Virtual links can only be set up between two <strong>FortiGate</strong><br />

units that act as area border routers. For more information, see “config virtual-link” under<br />

the OSPF “config area” sub<strong>com</strong>mand in the <strong>FortiGate</strong> CLI Reference.<br />

Figure 157:New/Edit OSPF Area<br />

Area<br />

Type a 32-bit identifier for the area. The value must resemble an IP<br />

address in decimal-dot notation. Once the OSPF area has been created,<br />

the area IP value cannot be changed.<br />

<strong>FortiGate</strong> Version 3.0 MR5 <strong>Administration</strong> <strong>Guide</strong><br />

01-30005-0203-20070830 253

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!