Basic OSPF configuration

Jon_Pahl1 — Mon, 01 Jul 2019 04:47:55 GMT

Configuring a Checkpoint Gateway for a simple OSPF environment.

For this example we will be concentrating on the links between R1 and R2 and the gateway at the bottom. The other links are irrelevant and simple server to provide an ISP like look for this article. The default route or 0.0.0.0/0 is being provided by the upper most router in this first depiction or 10.4.10.1.

Relevant router configuration for R1 and R2. please note the bad practice of not using encryption on the OSPF neighbor relationship, this will be covered at a later date.

R1:

hostname R1

interface GigabitEthernet0/0

ip address 10.4.1.2 255.255.255.252

ip ospf 100 area 0

interface GigabitEthernet3/0

ip address 10.4.3.1 255.255.255.252

ip ospf 100 area 0

router ospf 100

router-id 10.4.1.2

log-adjacency-changes

end

R2:

hostname R2

interface GigabitEthernet0/0

ip address 10.4.0.2 255.255.255.252

ip ospf 100 area 0

interface GigabitEthernet3/0

ip address 10.4.2.1 255.255.255.252

ip ospf 100 area 0

router ospf 100

router-id 10.4.0.2

log-adjacency-changes

Now for the gateway

GUI: configuration:

- To enable OSPF simple add the interfaces on the ospf configuration screen. Login to Gaia via https and find the OSPF section under advanced routing.

Click Add under interfaces to add the necessary interfaces it is unnecessary to create the backbone area or area 0 as this area is created by default. Please note the other settings on this page for now don't change them but they can be used to tune you routing convergence, set neighbor authentication etc…

Once the gateway interfaces have been added to the OSPF page you can monitor you progress by clicking on the Monitoring icon on the top right of the page. Once on the monitoring page select Neighbor to see your OSPF neighbor adjacency. (TIP: you should seldom see the Dead (timer) value below 20 and in most environments 30)

On your routers you should see a similar result

Finally to verify your route table via the GUI:

Select Routing Monitor under Advanced Routing to see a complete route table

To review the route table and neighbor relationships from the gateway CLI:

"show route" to review the route table

"show ospf neighbors" to review your neighbor status

Re: Basic OSPF configuration

HeikoAnkenbrand — Mon, 01 Jul 2019 09:09:49 GMT

Nice example!

Re: Basic OSPF configuration

ravishankar_val — Wed, 08 Apr 2020 04:54:44 GMT

i have tried same in my lab configuration. ospf neighbor ship is not forming. Do we need to add any policies in management server

Re: Basic OSPF configuration

kb1 — Thu, 02 Jul 2020 17:58:23 GMT

i believe you must follow this sk to allow ospf updates to pass through the firewall-

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk39960#Allowing%20OSPF

Re: Basic OSPF configuration

ranc — Wed, 12 Aug 2020 20:34:45 GMT

Nice, thanks

Re: Basic OSPF configuration

KostasGR — Tue, 27 Apr 2021 17:45:16 GMT

Hello

Nice example. What about anti-spoofing configuration?

BR,

Kostas

topic Re: Basic OSPF configuration in Firewall and Security Management

Basic OSPF configuration

Re: Basic OSPF configuration

Re: Basic OSPF configuration

Re: Basic OSPF configuration

Re: Basic OSPF configuration

Re: Basic OSPF configuration