Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

[Fortinet] configure OSPF under the command line of FortiGate firewall

2025-01-28 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

ForGate and Cisco establish an OSPF connection to learn routing dynamically. The relevant IP information is shown in the topology diagram.

The FortiGate internal7 interface is connected to the Cisco Router G0amp0 interface, Fortigate ip:134.167.19.5,Cisco ip:134.167.19.254

Configuration ideas:

1. Set up OSPF router-id

two。 Create a new area:

3. Declare the network segment and apply area:

4. Add the API that needs to run OSPF and some necessary parameters:

5. Redistribute directly connected routes into ospf:

Command line configuration:

ZhongQu-SH-FW # config router ospf

1. Set up OSPF router-id

ZhongQu-SH-FW (ospf) # set router-id 134.167.19.5

two。 Create a new area:

ZhongQu-SH-FW (ospf) # config area

ZhongQu-SH-FW (area) # edit 0.0.0.0

New entry '0.0.0.0' added

ZhongQu-SH-FW (0.0.0.0) # next

ZhongQu-SH-FW (area) # end

3. Declare the network segment and apply area:

ZhongQu-SH-FW (ospf) # config network

ZhongQu-SH-FW (network) # edit 1

New entry'1' added

ZhongQu-SH-FW (1) # set prefix 134.167.19.5 255.255.255.255

ZhongQu-SH-FW (1) # set area 0.0.0.0

ZhongQu-SH-FW (1) # next

ZhongQu-SH-FW (network) # end

4. Add the API that needs to run OSPF and some necessary parameters:

ZhongQu-SH-FW (ospf) # config ospf-interface

ZhongQu-SH-FW (ospf-interface) # edit ospf-area0

New entry 'ospf-area0' added

ZhongQu-SH-FW (ospf-area0) # set interface port16

ZhongQu-SH-FW (ospf-area0) # set hello-interval 10 / / is the same as the ospf hello-interval value of the peer

ZhongQu-SH-FW (ospf-area0) # set dead-interval 40 / / is the same as the ospf dead-interval value of the peer

ZhongQu-SH-FW (ospf-area0) # set status enable

ZhongQu-SH-FW (ospf-area0) # next

ZhongQu-SH-FW (ospf-interface) # end

5. Redistribute static routes into ospf:

ZhongQu-SH-FW (ospf) # config redistribute static

ZhongQu-SH-FW (static) # set status enable

ZhongQu-SH-FW (ospf) # end

Verify the effect:

View ospf neighbor establishment that you have learned

ZhongQu-SH-FW # get router info ospf neighbor

OSPF process 0:

Neighbor ID Pri State Dead Time Address Interface

134.167.19.2 1 Full/Backup 00:00:36 134.167.19.2 internal7

134.167.19.254 1 Full/DR 00:00:31 134.167.19.254 internal7

View learned OSPF routes

ZhongQu-SH-FW # get router info routing-table ospf

O E1 134.119.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E2 134.120.0.0/16 [110/1] via 134.167.19.2, internal7, 1d04h69m

O E1 134.121.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.125.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.127.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.22.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.24.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.30.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.32.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.34.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.35.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.36.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.40.0/22 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.80.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.100.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.129.120.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.131.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.132.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.133.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.22.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.30.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.32.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.34.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.35.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.51.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.134.100.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.22.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.30.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.32.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.34.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.35.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.40.0/22 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 134.166.100.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O 134.167.22.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.30.0/23 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.32.0/23 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.34.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.35.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.40.0/22 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.50.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m

O 134.167.100.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m

O E2 172.16.0.0/16 [110/1] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.0.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.2.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.4.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.6.0/24 [110/2] via 134.167.19.2, internal7, 03:57:43

O E1 172.17.7.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.9.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.10.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.13.0/24 [110/2] via 134.167.19.2, internal7, 23:58:16

O E1 172.17.14.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.15.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.16.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.17.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.18.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.20.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.22.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.24.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.25.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m

O E1 172.17.248.0/22 [110/2] via 134.167.19.2, internal7, 1d04h69m

Troubleshooting that cannot be negotiated by ospf:

1. The basic command is incorrect.

two。 Inconsistent with hello-interval and dead-interval of peer OSPF device

3. Inconsistent with the authentication of the peer OSPF device

4.DR and BDR election issues

5. Others.

Execute router clear ospf process / / clear ospf process

Get router info ospf neighbor / / View ospf's neighbors

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report