topic Re: Using Broadcast or IGMP mode in OSPF in General Topics

Using Broadcast or IGMP mode in OSPF

GigaYang — Mon, 03 Feb 2025 11:18:13 GMT

We will enable OSPF on the new Check Point firewalls.

Between the two modes of Broadcast and IGMP, which one is more recommended to be used with OSPF.

I have tested IGMP mode with OPSF in a lab environment, but I am worried that the settings may not work in a real environment due to switches and other network devices. In this case, Broadcast seems to be a simpler choice.

Thanks

Re: Using Broadcast or IGMP mode in OSPF

Chris_Atkinson — Mon, 03 Feb 2025 11:47:02 GMT

Is this for a cluster or individual gateway?

Before R81.10 point-to-point wasn't an option per sk116500. Be aware that your security policy must allow the necessary traffic for OSPF neighbors to form per sk39960.

Re: Using Broadcast or IGMP mode in OSPF

GigaYang — Mon, 03 Feb 2025 11:48:03 GMT

HI Chris Atkinson,
Thank you for your answers.

We will use Cluster, so the Router ID will be VIP.

In my lab, there is only one Any > Any > Allow rule. In a formal environment, relevant rules will be clearly defined in the rule base.

What I am currently worried about is whether I might encounter unknown problems in a formal environment if I use IGMP with OSPF.

Re: Using Broadcast or IGMP mode in OSPF

Chris_Atkinson — Mon, 03 Feb 2025 14:31:48 GMT

So we're all clear can you please clarify what you mean by use IGMP (part of the OSPF communication itself)?.

As a specific point to be aware of Check Point ClusterXL leverages unicast in modern versions in preference to broadcast/igmp.