Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Jon_Pahl1
Employee
Employee

Basic OSPF configuration

Configuring a Checkpoint Gateway for a simple OSPF environment.

 

For this example we will be concentrating on the links between R1 and R2 and the gateway at the bottom. The other links are irrelevant and simple server to provide an ISP like look for this article. The default route or 0.0.0.0/0 is being provided by the upper most router in this first depiction or 10.4.10.1.

2019-06-30 23_41_02-Basic OSPF configuration - OneNote.png

 

 

 

 

 

 

 

 

 

 

 

Relevant router configuration for R1 and R2. please note the bad practice of not using encryption on the OSPF neighbor relationship, this will be covered at a later date.

 

 

R1:

hostname R1

!

interface GigabitEthernet0/0

 ip address 10.4.1.2 255.255.255.252

 ip ospf 100 area 0

!

interface GigabitEthernet3/0

 ip address 10.4.3.1 255.255.255.252

 ip ospf 100 area 0

!

router ospf 100

 router-id 10.4.1.2

 log-adjacency-changes

!

end

 

 

R2:

hostname R2

!

interface GigabitEthernet0/0

 ip address 10.4.0.2 255.255.255.252

 ip ospf 100 area 0

!

interface GigabitEthernet3/0

 ip address 10.4.2.1 255.255.255.252

 ip ospf 100 area 0

!

router ospf 100

 router-id 10.4.0.2

 log-adjacency-changes

!

 

Now for the gateway

 

GUI: configuration:

    - To enable OSPF simple add the interfaces on the ospf configuration screen. Login to Gaia via https and find the OSPF section under advanced routing.

2019-06-30 23_26_00-Gaia - Internet Explorer.png

 

 Click Add under interfaces to add the necessary interfaces  it is unnecessary to create the backbone area or area 0 as this area is created by default. Please note the other settings on this page for now don't change them but they can be used to tune you routing convergence, set neighbor authentication etc…

2019-06-30 23_28_58-Gaia - Internet Explorer.png

 

 

Once the gateway interfaces have been added to the OSPF page you can monitor you progress by clicking on the Monitoring icon on the top right of the page. Once on the monitoring page select Neighbor to see your OSPF neighbor adjacency.  (TIP: you should seldom see the Dead (timer) value below 20 and in most environments 30)

2019-06-30 23_31_59-Gaia - Internet Explorer.png

 

On your routers you should see a similar result

2019-06-30 23_33_46-R2.png

 

Finally to verify your route table via the GUI:

Select Routing Monitor under Advanced Routing to see a complete route table

2019-06-30 23_34_42-Gaia - Internet Explorer.png

 

To review the route table and neighbor relationships from the gateway CLI:

"show route" to review the route table

2019-06-30 23_36_40-10.254.254.200 - PuTTY.png

 

"show ospf neighbors" to review your neighbor status

 

2019-06-30 23_37_33-10.254.254.200 - PuTTY.png

5 Replies
HeikoAnkenbrand
Champion Champion
Champion

Nice example!

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
0 Kudos
ravishankar_val
Explorer

i have tried same in my lab configuration. ospf neighbor ship is not forming. Do we need to add any policies in management server

0 Kudos
kb1
Collaborator

i believe you must follow this sk to allow ospf updates to pass through the firewall-

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
0 Kudos
ranc
Explorer

Nice, thanks

0 Kudos
KostasGR
Advisor

Hello

Nice example. What about anti-spoofing configuration?

BR,

Kostas

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events