[Fortinet] configure OSPF under the command line of FortiGate firewall
ForGate and Cisco establish an OSPF connection to learn routing dynamically. The relevant IP information is shown in the topology diagram.
The FortiGate internal7 interface is connected to the Cisco Router G0amp0 interface, Fortigate ip:134.167.19.5,Cisco ip:134.167.19.254
Configuration ideas:
1. Set up OSPF router-id
two。 Create a new area:
3. Declare the network segment and apply area:
4. Add the API that needs to run OSPF and some necessary parameters:
5. Redistribute directly connected routes into ospf:
Command line configuration:
ZhongQu-SH-FW # config router ospf
1. Set up OSPF router-id
ZhongQu-SH-FW (ospf) # set router-id 134.167.19.5
two。 Create a new area:
ZhongQu-SH-FW (ospf) # config area
ZhongQu-SH-FW (area) # edit 0.0.0.0
New entry '0.0.0.0' added
ZhongQu-SH-FW (0.0.0.0) # next
ZhongQu-SH-FW (area) # end
3. Declare the network segment and apply area:
ZhongQu-SH-FW (ospf) # config network
ZhongQu-SH-FW (network) # edit 1
New entry'1' added
ZhongQu-SH-FW (1) # set prefix 134.167.19.5 255.255.255.255
ZhongQu-SH-FW (1) # set area 0.0.0.0
ZhongQu-SH-FW (1) # next
ZhongQu-SH-FW (network) # end
4. Add the API that needs to run OSPF and some necessary parameters:
ZhongQu-SH-FW (ospf) # config ospf-interface
ZhongQu-SH-FW (ospf-interface) # edit ospf-area0
New entry 'ospf-area0' added
ZhongQu-SH-FW (ospf-area0) # set interface port16
ZhongQu-SH-FW (ospf-area0) # set hello-interval 10 / / is the same as the ospf hello-interval value of the peer
ZhongQu-SH-FW (ospf-area0) # set dead-interval 40 / / is the same as the ospf dead-interval value of the peer
ZhongQu-SH-FW (ospf-area0) # set status enable
ZhongQu-SH-FW (ospf-area0) # next
ZhongQu-SH-FW (ospf-interface) # end
5. Redistribute static routes into ospf:
ZhongQu-SH-FW (ospf) # config redistribute static
ZhongQu-SH-FW (static) # set status enable
ZhongQu-SH-FW (ospf) # end
Verify the effect:
View ospf neighbor establishment that you have learned
ZhongQu-SH-FW # get router info ospf neighbor
OSPF process 0:
Neighbor ID Pri State Dead Time Address Interface
134.167.19.2 1 Full/Backup 00:00:36 134.167.19.2 internal7
134.167.19.254 1 Full/DR 00:00:31 134.167.19.254 internal7
View learned OSPF routes
ZhongQu-SH-FW # get router info routing-table ospf
O E1 134.119.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E2 134.120.0.0/16 [110/1] via 134.167.19.2, internal7, 1d04h69m
O E1 134.121.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.125.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.127.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.22.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.24.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.30.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.32.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.34.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.35.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.36.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.40.0/22 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.80.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.100.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.129.120.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.131.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.132.0.0/16 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.133.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.22.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.30.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.32.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.34.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.35.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.51.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.134.100.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.22.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.30.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.32.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.34.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.35.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.40.0/22 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 134.166.100.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O 134.167.22.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.30.0/23 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.32.0/23 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.34.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.35.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.40.0/22 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.50.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m
O 134.167.100.0/24 [110/2] via 134.167.19.254, internal7, 1d04h69m
O E2 172.16.0.0/16 [110/1] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.0.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.2.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.4.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.6.0/24 [110/2] via 134.167.19.2, internal7, 03:57:43
O E1 172.17.7.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.9.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.10.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.13.0/24 [110/2] via 134.167.19.2, internal7, 23:58:16
O E1 172.17.14.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.15.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.16.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.17.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.18.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.19.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.20.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.22.0/23 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.24.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.25.0/24 [110/2] via 134.167.19.2, internal7, 1d04h69m
O E1 172.17.248.0/22 [110/2] via 134.167.19.2, internal7, 1d04h69m
Troubleshooting that cannot be negotiated by ospf:
1. The basic command is incorrect.
two。 Inconsistent with hello-interval and dead-interval of peer OSPF device
3. Inconsistent with the authentication of the peer OSPF device
4.DR and BDR election issues
5. Others.
Execute router clear ospf process / / clear ospf process
Get router info ospf neighbor / / View ospf's neighbors
