Related Topics
Configure IPv4 Routing with OSPF
If you enable OSPF for a FireCluster, you must set the router-id in the OSPF configuration to the interface IP address used by the cluster. This is to make sure that the routing protocol does not try to use the FireCluster management IP address as the router-id. Do not use the FireCluster management IP address or cluster IP address as the router-id. To set the router-id, use the command ospf router-id <ip-address> in your OSPF configuration.
If your Firebox has multi-WAN enabled, you can configure a loopback interface, and use the IP address of the loopback interface instead of the IP address of the physical interfaces in the dynamic routing configuration. For more information, see Configure a Loopback Interface.
- Select Network > Dynamic Routing.
The Dynamic Routing page appears. - Select the Enable Dynamic Routing check box.
- Select the OSPF tab.
- Select the Enable check box.
- Copy and paste your routing daemon configuration file in the text box.
For more information, see About Routing Daemon Configuration Files.
To get started, you must have at least two commands in your OSPF configuration file. These two commands, in this order, start the OSPF process:
router ospf
network <network IP address of the interface you want the process to listen on and distribute through the protocol>
area <area ID in x.x.x.x format, such as 0.0.0.0>
- Click Save.
If necessary, Fireware automatically adds the required dynamic routing policy or enables an existing OSPF dynamic routing policy, if one exists.
- Select Network > Dynamic Routing.
The Dynamic Routing Setup dialog box appears. - Select the Enable Dynamic Routing check box.
- Select the OSPF tab.
- Select the Enable OSPF check box.
- Click Import to import a routing daemon configuration file, or copy and paste your configuration file in the text box.
For more information, see About Routing Daemon Configuration Files.
To get started, you must have at least two commands in your OSPF configuration file. These two commands, in this order, start the OSPF process:
router ospf
network <network IP address of the interface you want the process to listen on and distribute through the protocol>
area <area ID in x.x.x.x format, such as 0.0.0.0>
- Click OK.
If an enabled dynamic routing policy does not exist, Policy Manager asks if you want to add the required policy. - Click Yes to add the required dynamic routing policy.
Policy Manager adds the required dynamic routing policy, or enables an existing OSPF dynamic routing policy, if one exists.
When you enable OSPF, a dynamic routing policy called DR-OSPF-Allow is automatically created. You can edit this policy to add authentication and restrict the policy to listen on only the correct interfaces. The DR-OSPF-Allow policy is configured to allow OSPF multicasts to the reserved multicast addresses for OSPF.
After you configure the Firebox and the OSPF router, you can look at the routes table to verify that the Firebox has received route updates from the OSPF router.
To see the dynamic routes, from Firebox System Manager select the Status Report tab.
To see dynamic routes, from Fireware Web UI select System Status > Routes.