动态路由选择 > 关于开放式最短路径优先 (OSPF) 协议 > OSPF 路由配置文件示例

OSPF 路由配置文件示例

要在 Fireware XTM 上使用任何动态路由协议,必须为动态路由守护程序复制并粘贴一个配置文件。 本主题包括了 OSPF 路由守护程序的一个配置文件示例。 如果要用此配置文件作为自己的配置文件的基础,请将文本复制到新的文本文件中,并以新的名称保存。 可以编辑相关参数以满足组织的要求。

可选命令会加注“!”字符。 要启用命令,请删除“!”并按照需要修改变量。

!! SECTION 1: Configure interface properties.
! Set properties for interface eth1.
! interface eth1
! 
! Set simple authentication password (SHAREDKEY).
! ip ospf authentication-key SHAREDKEY
!
! Set MD5 authentication key ID (10) and MD5 authentication key (AUTHKEY).
! ip ospf message-digest-key 10 md5 AUTHKEY
! 
! Set link cost to 1000 (1-65535) on interface eth1.
! for OSPF link cost table. 
! ip ospf cost 1000
!
! Set hello interval to 5 seconds (1-65535); default is 10 seconds.
! ip ospf hello-interval 5
! 
! Set dead-interval to 15 seconds (1-65535); default is 40 seconds.
! ip ospf dead-interval 15
! 
! Set interval between link-state advertisements (LSA) retransmissions
! to 10 seconds (1-65535); default is 5 seconds. 
! ip ospf retransmit-interval 10 
!
! Set LSA update interval to 3 seconds (1-3600); default is 1 second.
! ip ospf transmit-delay 3
! 
! Set high priority (0-255) to increase eligibility to become the
! designated router (DR).
! ip ospf priority 255
!! SECTION 2: Start OSFP and set daemon properties.
! Enable OSPF daemon. Must be enabled for all OSPF configurations.
! router ospf
!
! Set the router ID manually to 100.100.100.20. If not set, the firewall will
! set its own ID based on an interface IP address.
! ospf router-id 100.100.100.20 
!
! Enable RFC 1583 compatibility (increases probability of routing loops).
! ospf rfc1583compatibility
! 
! Set area border router (ABR) type to cisco, ibm, shortcut, or standard. 
! More information about ABR types is in draft-ietf-ospf-abr-alt-05.txt.
! ospf abr-type cisco
! 
! Disable OSPF announcement on interface eth0.
! passive interface eth0 
! 
! Set global cost to 1000 (0-429495).
! auto-cost reference bandwidth 1000 
! 
! Set SPF schedule delay to 25 (0-4294967295) seconds and hold time to 
! 20 (0-4294967295) seconds; default is 5 and 10 seconds. 
! timers spf 25 20
!! SECTION 3: Set network and area properties. Set areas with W.X.Y.Z 
!! or Z notation. 
! Announce OSPF on network 192.168.253.0/24 network for area 0.0.0.0.
! network 192.168.253.0/24 area 0.0.0.0 
! 
! Create area 0.0.0.1 and set a classful network range (172.16.254.0/24)
! for the area (range and interface network settings must match).
! area 0.0.0.1 range 172.16.254.0/24
!
! Set virtual link neighbor (172.16.254.1) for area 0.0.0.1.
! area 0.0.0.1 virtual-link 172.16.254.1
! 
! Set area 0.0.0.1 as a stub on all routers in area 0.0.0.1.
! area 0.0.0.1 stub
! 
! area 0.0.0.2 stub no-summary 
! 
! Enable simple password authentication for area 0.0.0.0. 
! area 0.0.0.0 authentication
! 
! Enable MD5 authentication for area 0.0.0.1.
! area 0.0.0.1 authentication message-digest
!! SECTION 4: Redistribute OSPF routes 
! Share route of last resort (default route) from kernel routing table
! with OSPF peers.
! default-information originate 
! 
! Redistribute static routes to OSPF. 
! redistribute kernel 
! 
! Redistribute routes from all interfaces to OSPF.
! redistribute connected
! redistribute connected route-map
!!Redistribute routes from RIP and BGP to OSPF.
! redistribute rip 
! redistribute bgp
!! SECTION 5: Configure route redistribution filters with access lists
!! and route maps.  
! Create an access list to only allow redistribution of 10.0.2.0/24.
! access-list LISTNAME permit 10.0.2.0/24
! access-list LISTNAME deny any
! 
! Create a route map with name MAPNAME and allow with a 
! priority of 10 (1-199).
! route-map MAPNAME permit 10
! match ip address LISTNAME 

另请参阅

关于开放式最短路径优先 (OSPF) 协议

OSPF 命令

配置 XTM 设备以使用 OSPF

提供反馈  •   获得支持  •   全部产品文件  •   知识库