Kaspersky SD-WAN
2.1
English

Contents

The OSPF dynamic routing protocol

Kaspersky SD-WAN supports the use of the OSPF (Open Shortest Path First) dynamic routing protocol to exchange routing information between CPE devices connected to your SD-WAN network, as well as with third-party network devices.

When configuring the protocol, you can create OSPF areas (hereinafter also referred to as areas) and OSPF interfaces (hereinafter also referred to as interfaces).

In this Help section

Configuring the OSPF protocol

Creating an OSPF area

Editing an OSPF area

Deleting an OSPF area

Creating an OSPF interface

Editing an OSPF interface

Deleting an OSPF interface
Page top
[Topic 261972]

Configuring the OSPF protocol

Expand all | Collapse all

You can specify settings for using the OSPF dynamic routing protocol on an individual CPE device or on all devices that use the CPE template. If you plan to use route filtering, before configuring the OSPF protocol, you must do the following:

Use the following instructions to configure OSPF:

  • Configuring OSPF on an individual CPE device.

    To configure OSPF on an individual CPE device:

    1. In the menu, go to the SD-WAN section.

      By default, the CPE subsection is displayed with a table of CPE devices.

    2. Click the CPE device.

      The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

    3. Select the OSPF tab.

      By default, the General settings tab is selected, which displays the OSPF settings.

    4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
    5. In the OSPF drop-down list, select one of the following values:
      • Enabled
      • Disabled (selected by default)
    6. In the Router ID field, enter the IPv4 address of the CPE device.
    7. In the Maximum Paths field, enter the maximum number of entries in the routing table of the CPE device. Range of values: 1 to 16.
    8. If you want to use the CPE device as a border router (Area Border Router, ABR), in the ABR Type drop-down list, select one of the following values:
      • IBM (this implementation is used by default)
      • CISCO
      • Shortcut
      • STANDARD
    9. In the Auto Cost Reference Bandwidth field, enter the reference bandwidth for calculating the cost of communication channels. The cost is used to determine the best route. You can increase or decrease the reference value to influence the route selection and to give preference to certain communication channels. Range of values: 1 to 4,294,967.
    10. If you need to switch all interfaces of the CPE device to passive mode, select the Passive Interface Default check box. In passive mode, interfaces do not send OSPF hello packets and do not actively participate in OSPF routing. As a rule, interfaces that do not need routing updates, such as interfaces connected to user devices or networks that are not part of the OSPF domain, are switched to passive mode. This check box is cleared by default.
    11. If you want to keep an OSPF log, select the Log Adjacency Changes check box. The OSPF log records changes that occur between the CPE device and OSPF peers, such as when a peer goes out of service. This check box lets you track changes, resolve peer-related problems, and gather information about the stability of the OSPF network. This check box is cleared by default.
    12. If you have selected the Log Adjacency Changes check box, if you want to keep a more detailed OSPF log, select the Detail check box. The more detailed log lets you diagnose individual events involving an OSPF peer, as well as see the sequence of its states changing. This check box is cleared by default.
    13. If necessary, under Route redistribution, configure the redistribution of routes of other routing protocols in OSPF:
      1. Select the check box next to the route type:
        • BGP to redistribute BGP routes.
        • Connected to redistribute routes directly connected to CPE device interfaces.
        • Kernel to redistribute Kernel routes generated by the operating system of the CPE device.
        • Static to redistribute static routes.

        By default, all check boxes are cleared.

      2. In the Route map drop-down list, select a previously created route map to pick the routes that you want to redistribute.
      3. In the Metric field, enter a metric for redistributed routes. Range of values: 0 to 16,777,214.
      4. In the Metric Type drop-down list, select the type of the metric:
        • Type 1 (or "internal metric")
        • Type 2 (or "external metric")
      5. Select the Filtering check box and in the Access control list drop-down list, select the previously created access control list that you want to use for reallocating routes. This check box is cleared by default.
    14. In the Default Metric field, enter the default metric for all OSPF routes. Range of values: 0 to 16,777,214.
    15. If necessary, configure the CPE device to advertise the default route to the OSPF network:
      1. Select the Default Originate check box. This check box is cleared by default.
      2. Select the Always check box to always advertise the default route, even if it is not in the CPE device's routing table. This check box is cleared by default.
      3. In the Metric Type drop-down list, select the type of metric for the default route:
        • Type 1
        • Type 2
      4. In the Metric field, enter a metric for the default route. Range of values: 0 to 16,777,214.
      5. In the Route map drop-down list, select a previously created route map for the default route.
    16. In the Distance field, enter the administrative distance for the OSPF routes. When multiple routes exist to a single destination, provided by different routing protocols, the administrative distance allows you to pick the preferred protocol.

      The lower the administrative distance specified for a protocol, the higher the priority its route have. For example, if you want routes OSPF routes to always be preferred over BGP routes, specify the administrative distance of 1 for OSPF and 2 for BGP. Range of values: 1 to 255.

    17. If necessary, configure the administrative distances of individual OSPF routes:
      1. Select the Distance OSPF check box. This check box is cleared by default.
      2. In the External field, enter the administrative distance for routes from external OSPF domains or routing protocols. Range of values: 1 to 255.
      3. In the Inter-Area field, enter the administrative distance for routes from different areas of the same OSPF domain. Range of values: 1 to 255.
      4. In the Intra-Area field, enter the administrative distance for routes from the same area. Range of values: 1 to 255.
    18. If necessary, enable
      Graceful restart
      on the CPE device:
      1. Select the Graceful Restart check box. This check box is cleared by default.
      2. In the Grace Period (sec.) field, enter the length of time, in seconds, during which the CPE device announces its intention to restart to OSPF peers. Range of values: 1 to 1800.
    19. If necessary, configure timers for the Shortest Path First (SPF) algorithm calculations:
      1. Select the Timers Throttle SPF check box. This check box is cleared by default.
      2. In the Delay (sec.) field, enter the length in seconds of the delay before starting the calculations of the SPF algorithm. Range of values: 0 to 600,000.
      3. In the Initial Hold-Time (ms.) field, enter the minimum retention time in milliseconds between two calculations of the SPF algorithm. Range of values: 0 to 600,000.
      4. In the Maximum Hold-Time (ms.) field, enter the maximum retention time in milliseconds between two calculations of the SPF algorithm. Range of values: 0 to 600,000.
    20. If necessary, configure maximum metrics for link state advertisement (LSA):
      1. Select the Administrative check box to administratively specify the maximum metric value for LSA of the CPE device.
      2. Select the On Startup check box to specify the time in seconds for which the maximum metric remains applied to the LSA of the CPE device when the OSPF process is started or restarted, and enter a value in theTimer (sec.) field.
      3. Select the On Shutdown check box to specify the time in seconds for which that the maximum metric remains applied to the LSA of the CPE device when the OSPF process finishes, and enter a value in the Timer (sec.) field.
    21. In the upper part of the settings area, click Save to save the configuration of the CPE device.
  • Configuring OSPF on all devices that use a CPE template.

    To configure OSPF on all devices that use a CPE template:

    1. In the menu, go to the SD-WAN → CPE templates subsection.

      A table of CPE templates is displayed.

    2. Click the CPE template.

      The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

    3. Select the OSPF tab.

      By default, the General settings tab is selected, which displays the OSPF settings.

    4. In the OSPF drop-down list, select one of the following values:
      • Enabled
      • Disabled (selected by default)
    5. In the Router ID field, enter the IPv4 address of the CPE device.
    6. In the Maximum Paths field, enter the maximum number of entries in the routing table of the CPE device. Range of values: 1 to 16.
    7. If you want to use the CPE device as a border router (Area Border Router, ABR), in the ABR Type drop-down list, select one of the following values:
      • IBM (this implementation is used by default)
      • CISCO
      • Shortcut
      • STANDARD
    8. In the Auto Cost Reference Bandwidth field, enter the reference bandwidth for calculating the cost of communication channels. The cost is used to determine the best route. You can increase or decrease the reference value to influence the route selection and to give preference to certain communication channels. Range of values: 1 to 4,294,967.
    9. If you need to switch all interfaces of the CPE device to passive mode, select the Passive Interface Default check box. In passive mode, interfaces do not send OSPF hello packets and do not actively participate in OSPF routing. As a rule, interfaces that do not need routing updates, such as interfaces connected to user devices or networks that are not part of the OSPF domain, are switched to passive mode. This check box is cleared by default.
    10. If you want to keep an OSPF log, select the Log Adjacency Changes check box. The OSPF log records changes that occur between the CPE device and OSPF peers, such as when a peer goes out of service. This check box lets you track changes, resolve peer-related problems, and gather information about the stability of the OSPF network. This check box is cleared by default.
    11. If you have selected the Log Adjacency Changes check box, if you want to keep a more detailed OSPF log, select the Detail check box. The more detailed log lets you diagnose individual events involving an OSPF peer, as well as see the sequence of its states changing. This check box is cleared by default.
    12. If necessary, under Route redistribution, configure the redistribution of routes of other routing protocols in OSPF:
      1. Select the check box next to the route type:
        • BGP to redistribute BGP routes.
        • Connected to redistribute routes directly connected to CPE device interfaces.
        • Kernel to redistribute Kernel routes generated by the operating system of the CPE device.
        • Static to redistribute static routes.

        By default, all check boxes are cleared.

      2. In the Route map drop-down list, select a previously created route map to pick the routes that you want to redistribute.
      3. In the Metric field, enter a metric for redistributed routes. Range of values: 0 to 16,777,214.
      4. In the Metric Type drop-down list, select the type of the metric:
        • Type 1 (or "internal metric")
        • Type 2 (or "external metric")
      5. Select the Filtering check box and in the Access control list drop-down list, select the previously created access control list that you want to use for reallocating routes. This check box is cleared by default.
    13. In the Default Metric field, enter the default metric for all OSPF routes. Range of values: 0 to 16,777,214.
    14. If necessary, configure the CPE device to advertise the default route to the OSPF network:
      1. Select the Default Originate check box. This check box is cleared by default.
      2. Select the Always check box to always advertise the default route, even if it is not in the CPE device's routing table. This check box is cleared by default.
      3. In the Metric Type drop-down list, select the type of metric for the default route:
        • Type 1
        • Type 2
      4. In the Metric field, enter a metric for the default route. Range of values: 0 to 16,777,214.
      5. In the Route map drop-down list, select a previously created route map for the default route.
    15. In the Distance field, enter the administrative distance for the OSPF routes. When multiple routes exist to a single destination, provided by different routing protocols, the administrative distance allows you to pick the preferred protocol.

      The lower the administrative distance specified for a protocol, the higher the priority its route have. For example, if you want routes OSPF routes to always be preferred over BGP routes, specify the administrative distance of 1 for OSPF and 2 for BGP. Range of values: 1 to 255.

    16. If necessary, configure the administrative distances of individual OSPF routes:
      1. Select the Distance OSPF check box. This check box is cleared by default.
      2. In the External field, enter the administrative distance for routes from external OSPF domains or routing protocols. Range of values: 1 to 255.
      3. In the Inter-Area field, enter the administrative distance for routes from different areas of the same OSPF domain. Range of values: 1 to 255.
      4. In the Intra-Area field, enter the administrative distance for routes from the same area. Range of values: 1 to 255.
    17. If necessary, enable Graceful restart on the CPE device:
      1. Select the Graceful Restart check box. This check box is cleared by default.
      2. In the Grace Period (sec.) field, enter the length of time, in seconds, during which the CPE device announces its intention to restart to OSPF peers. Range of values: 1 to 1800.
    18. If necessary, configure timers for the Shortest Path First (SPF) algorithm calculations:
      1. Select the Timers Throttle SPF check box. This check box is cleared by default.
      2. In the Delay (sec.) field, enter the length in seconds of the delay before starting the calculations of the SPF algorithm. Range of values: 0 to 600,000.
      3. In the Initial Hold-Time (ms.) field, enter the minimum retention time in milliseconds between two calculations of the SPF algorithm. Range of values: 0 to 600,000.
      4. In the Maximum Hold-Time (ms.) field, enter the maximum retention time in milliseconds between two calculations of the SPF algorithm. Range of values: 0 to 600,000.
    19. If necessary, configure maximum metrics for link state advertisement (LSA):
      1. Select the Administrative check box to administratively specify the maximum metric value for LSA of the CPE device.
      2. Select the On Startup check box to specify the time in seconds for which the maximum metric remains applied to the LSA of the CPE device when the OSPF process is started or restarted, and enter a value in theTimer (sec.) field.
      3. Select the On Shutdown check box to specify the time in seconds for which that the maximum metric remains applied to the LSA of the CPE device when the OSPF process finishes, and enter a value in the Timer (sec.) field.
    20. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261868]

Creating an OSPF area

Expand all | Collapse all

You can create an OSPF area on an individual CPE device or on all devices that use the CPE template. If you plan to use route filtering, before creating an area, you must do the following:

To create an OSPF area, use the following instructions:

  • Creating an OSPF area on an individual CPE device.

    To create an OSPF area on an individual CPE device:

    1. In the menu, go to the SD-WAN section.

      By default, the CPE subsection is displayed with a table of CPE devices.

    2. Click the CPE device.

      The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

    3. Select the OSPF → OSPF Areas tab.

      A table of OSPF areas is displayed.

    4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
    5. Click + Configure OSPF Area.
    6. This opens a window; in that window, in the Name field, enter the area ID as an IPv4 address or an integer number.
    7. If necessary, make the area a stub area:
      1. Select the Stub check box. This check box is cleared by default.
      2. In the Area Type drop-down list, select a stub area type:
        • Stub
        • STUB NO-SUMMARY
        • NSSA
        • NSSA NO-SUMMARY
      3. If the Area Type drop-down list, you selectedNSSA or NSSA NO-SUMMARY, if you need to prevent the propagation of the default route to the NSSA area, select the NSSA Suppress FA check box. This check box is cleared by default.
      4. In the Default Cost field, enter a metric for the default route or for summary routes.
    8. If you need to use the shortcut method when performing the SPF algorithm calculations, select the Shortcut check box. This method helps reduce the amount of computation by excluding certain areas. This check box is cleared by default.
    9. In the Authentication drop-down list, select the OSPF authentication method:
      • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
      • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
    10. If necessary, under OSPF Ranges, add a range of IP addresses and allow or prohibit advertising of addresses from this range in OSPF:
      1. Click + Range.
      2. In the Range field, enter a range of IP addresses. The range is specified using a prefix.
      3. In the Action drop-down list, select the action that you want to apply to IP addresses from the range:
        • Advertise to advertise in OSPF. This is the default setting.
        • Not Advertise to not advertise in OSPF.
        • Substitute to substitute with IP addresses from a different range and advertise in OSPF.
      4. If the Action drop-down list, you selected Substitute, in the Substitute field, enter the range of IP addresses that you want to substitute the original range with.
      5. If in the Action drop-down list, you selected Advertise or Substitute, in the Cost field, enter a metric for IP addresses in the range. Range of values: 0 to 16,777,215.
    11. If necessary, under Virtual Links, add a virtual communication channel to connect the area you are creating to another area through the transit area:
      1. Click + Virtual Link.
      2. In the Address field, enter the IPv4 address of the router interface in the transit area.
    12. If necessary, under Filtering, configure route filtering in OSPF:
      1. In the Export List drop-down list, select a previously created access control list to filter routes advertised to other areas.
      2. In the Import List drop-down list, select a previously created access control list to filter routes advertised from other areas.
      3. In the Outbound Filter List drop-down list, select a previously created prefix list to filter routes advertised to other areas.
      4. In the Inbound Filter List drop-down list, select a previously created prefix list to filter routes advertised from other areas.
    13. Click Save.

      The OSPF area is created and displayed in the table.

    14. In the upper part of the settings area, click Save to save the configuration of the CPE device.
  • Creating an OSPF area on all devices that use the CPE template.

    To create an OSPF area on all devices that use the CPE template:

    1. In the menu, go to the SD-WAN → CPE templates subsection.

      A table of CPE templates is displayed.

    2. Click the CPE template.

      The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

    3. Select the OSPF → OSPF Areas tab.

      A table of OSPF areas is displayed.

    4. Click + Configure OSPF Area.
    5. This opens a window; in that window, in the Name field, enter the area ID as an IPv4 address or an integer number.
    6. If necessary, make the area a stub area:
      1. Select the Stub check box. This check box is cleared by default.
      2. In the Area Type drop-down list, select a stub area type:
        • Stub
        • STUB NO-SUMMARY
        • NSSA
        • NSSA NO-SUMMARY
      3. If the Area Type drop-down list, you selectedNSSA or NSSA NO-SUMMARY, if you need to prevent the propagation of the default route to the NSSA area, select the NSSA Suppress FA check box. This check box is cleared by default.
      4. In the Default Cost field, enter a metric for the default route or for summary routes.
    7. If you need to use the shortcut method when performing the SPF algorithm calculations, select the Shortcut check box. This method helps reduce the amount of computation by excluding certain areas. This check box is cleared by default.
    8. In the Authentication drop-down list, select the OSPF authentication method:
      • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
      • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
    9. If necessary, under OSPF Ranges, add a range of IP addresses and allow or prohibit advertising of addresses from this range in OSPF:
      1. Click + Range.
      2. In the Range field, enter a range of IP addresses. The range is specified using a prefix.
      3. In the Action drop-down list, select the action that you want to apply to IP addresses from the range:
        • Advertise to advertise in OSPF. This is the default setting.
        • Not Advertise to not advertise in OSPF.
        • Substitute to substitute with IP addresses from a different range and advertise in OSPF.
      4. If the Action drop-down list, you selected Substitute, in the Substitute field, enter the range of IP addresses that you want to substitute the original range with.
      5. If in the Action drop-down list, you selected Advertise or Substitute, in the Cost field, enter a metric for IP addresses in the range. Range of values: 0 to 16,777,215.
    10. If necessary, under Virtual Links, add a virtual communication channel to connect the area you are creating to another area through the transit area:
      1. Click + Virtual Link.
      2. In the Address field, enter the IPv4 address of the router interface in the transit area.
    11. If necessary, under Filtering, configure route filtering in OSPF:
      1. In the Export List drop-down list, select a previously created access control list to filter routes advertised to other areas.
      2. In the Import List drop-down list, select a previously created access control list to filter routes advertised from other areas.
      3. In the Outbound Filter List drop-down list, select a previously created prefix list to filter routes advertised to other areas.
      4. In the Inbound Filter List drop-down list, select a previously created prefix list to filter routes advertised from other areas.
    12. Click Save.

      The OSPF area is created and displayed in the table.

    13. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261916]

Editing an OSPF area

You can edit an OSPF area on an individual CPE device or on all devices that use the CPE template. For a description of the settings, see the instructions for creating an area.

To edit an OSPF area on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

    By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Areas tab.

    A table of OSPF areas is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click Edit next to the OSPF area.
  6. This opens a window; in that window, edit the settings that you want to change.
  7. Click Save.
  8. In the upper part of the settings area, click Save to save the configuration of the CPE device.

To edit an OSPF area on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN → CPE templates subsection.

    A table of CPE templates is displayed.

  2. Click the CPE template.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Areas tab.

    A table of OSPF areas is displayed.

  4. Click Edit next to the OSPF area.
  5. This opens a window; in that window, edit the settings that you want to change.
  6. Click Save.
  7. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261973]

Deleting an OSPF area

You can delete an OSPF area on an individual CPE device or on all devices that use the CPE template. Deleted areas cannot be restored.

To delete an OSPF area on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

    By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Areas tab.

    A table of OSPF areas is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click Delete next to the OSPF area.
  6. In the confirmation window, click Delete.

    The OSPF area is deleted and is no longer displayed in the table.

  7. In the upper part of the settings area, click Save to save the configuration of the CPE device.

To delete an OSPF area on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN section.

    By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Areas tab.

    A table of OSPF areas is displayed.

  4. Click Delete next to the OSPF area.
  5. In the confirmation window, click Delete.

    The OSPF area is deleted and is no longer displayed in the table.

  6. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261976]

Creating an OSPF interface

Expand all | Collapse all

You can create an OSPF interface on an individual CPE device or on all devices that use the CPE template. OSPF interfaces are created on top of network interfaces, so you must first create a network interface.

To create an OSPF interface, use the following instructions:

  • Creating an OSPF interface on an individual CPE device.

    To create an OSPF interface on an individual CPE device:

    1. In the menu, go to the SD-WAN section.

      By default, the CPE subsection is displayed with a table of CPE devices.

    2. Click the CPE device.

      The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

    3. Select the OSPF → OSPF Interfaces tab.

      A table of OSPF interfaces is displayed.

    4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
    5. Click + Configure OSPF Interface.
    6. This opens a window, in that window, in the Interface drop-down list, select a previously created network interface on top of which you want to create the OSPF interface.
    7. In the OSPF Area field, enter the ID of the OSPF area to which the interface belongs, as an IPv4 address or an integer number.
    8. If necessary, configure OSPF authentication:
      1. In the Authentication drop-down list, select an authentication method:
        • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
        • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
      2. If in the Authentication drop-down list, you selected Message Digest, in the Password field, enter an authentication password.
      3. If in the Authentication drop-down list, you selected Message Digest, follow these steps:
        1. In the Key ID field, enter the MD5 hash. Range of values: 1 to 255.
        2. In the Key field, enter the MD5 key.
    9. In the Cost field enter the metric of the interface. Range of values: 1 to 65,535.
    10. In the Network Type drop-down list, select the type of the network associated with the interface:
      • broadcast
      • non-broadcast
      • point-to-multipoint
      • point-to-point
    11. In the Priority field, enter the priority of the interface. The CPE device with the highest interface priority becomes the designated router, while the device with the second highest priority becomes the backup designated router.
    12. If you need to switch the interface to passive mode, select the Passive Interface check box. In passive mode, interfaces do not send OSPF hello packets and do not actively participate in OSPF routing. As a rule, interfaces that do not need routing updates, such as interfaces connected to user devices or networks that are not part of the OSPF domain, are switched to passive mode.
    13. To use the BFD protocol to detect loss of connectivity, select the BFD check box. This check box is cleared by default.
    14. If necessary, configure OSPF timers:
      1. Select the OSPF Timers check box. This check box is cleared by default.
      2. In the Hello (sec.) field, enter the period, in seconds, of the interface sending hello messages. Range of values: 1 to 65,535.
      3. In the Dead (sec.) field, enter the time in seconds for which the interface must wait to receive hello messages from OSPF peers. If no hello messages are received from the peer within the specified time, the interface considers the peer unavailable. Range of values: 1 to 65,535.
    15. In the Retransmit Interval (sec.) field, enter the time after which lost packets must be resent. Range of values: 1 to 65,535.
    16. In the Transmit Delay (sec.) field, enter the delay in seconds before the first OSPF packet is sent. Range of values: 1 to 65,535.
    17. Click Save.

      The OSPF interface is created and displayed in the table.

    18. In the upper part of the settings area, click Save to save the configuration of the CPE device.
  • Creating an OSPF interface on all devices that use the CPE template.

    To create an OSPF interface on all devices that use the CPE template:

    1. In the menu, go to the SD-WAN section.

      By default, the CPE subsection is displayed with a table of CPE devices.

    2. Click the CPE device.

      The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

    3. Select the OSPF → OSPF Interfaces tab.

      A table of OSPF interfaces is displayed.

    4. Click + Configure OSPF Interface.
    5. This opens a window, in that window, in the Interface drop-down list, select a previously created network interface on top of which you want to create the OSPF interface.
    6. In the OSPF Area field, enter the ID of the OSPF area to which the interface belongs, as an IPv4 address or an integer number.
    7. If necessary, configure OSPF authentication:
      1. In the Authentication drop-down list, select an authentication method:
        • Message Digest to use the MD5 algorithm, which ensures the security of communication by verifying the authenticity of packets using a shared secret key.
        • Simple Password to use an unencrypted password. This authentication method is less secure than Message Digest, however, it can provide authentication when used in a trusted network environment.
      2. If in the Authentication drop-down list, you selected Message Digest, in the Password field, enter an authentication password.
      3. If in the Authentication drop-down list, you selected Message Digest, follow these steps:
        1. In the Key ID field, enter the MD5 hash. Range of values: 1 to 255.
        2. In the Key field, enter the MD5 key.
    8. In the Cost field enter the metric of the interface. Range of values: 1 to 65,535.
    9. In the Network Type drop-down list, select the type of the network associated with the interface:
      • broadcast
      • non-broadcast
      • point-to-multipoint
      • point-to-point
    10. In the Priority field, enter the priority of the interface. The CPE device with the highest interface priority becomes the designated router, while the device with the second highest priority becomes the backup designated router.
    11. If you need to switch the interface to passive mode, select the Passive Interface check box. In passive mode, interfaces do not send OSPF hello packets and do not actively participate in OSPF routing. As a rule, interfaces that do not need routing updates, such as interfaces connected to user devices or networks that are not part of the OSPF domain, are switched to passive mode.
    12. To use the BFD protocol to detect loss of connectivity, select the BFD check box. This check box is cleared by default.
    13. If necessary, configure OSPF timers:
      1. Select the OSPF Timers check box. This check box is cleared by default.
      2. In the Hello (sec.) field, enter the period, in seconds, of the interface sending hello messages. Range of values: 1 to 65,535.
      3. In the Dead (sec.) field, enter the time in seconds for which the interface must wait to receive hello messages from OSPF peers. If no hello messages are received from the peer within the specified time, the interface considers the peer unavailable. Range of values: 1 to 65,535.
    14. In the Retransmit Interval (sec.) field, enter the time after which lost packets must be resent. Range of values: 1 to 65,535.
    15. In the Transmit Delay (sec.) field, enter the delay in seconds before the first OSPF packet is sent. Range of values: 1 to 65,535.
    16. Click Save.

      The OSPF interface is created and displayed in the table.

    17. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261933]

Editing an OSPF interface

You can edit an OSPF interface on an individual CPE device or on all devices that use the CPE template. For a description of the settings, see the instructions for creating a interface.

To edit an OSPF interface on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

    By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Interfaces tab.

    A table of OSPF interfaces is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click Edit next to the OSPF interface.
  6. This opens a window; in that window, edit the settings that you want to change.
  7. Click Save.
  8. In the upper part of the settings area, click Save to save the configuration of the CPE device.

To edit an OSPF interface on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN → CPE templates subsection.

    A table of CPE templates is displayed.

  2. Click the CPE template.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Interfaces tab.

    A table of OSPF interfaces is displayed.

  4. Click Edit next to the OSPF interface.
  5. This opens a window; in that window, edit the settings that you want to change.
  6. Click Save.
  7. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261977]

Deleting an OSPF interface

You can delete an OSPF interface on an individual CPE device or on all devices that use the CPE template. Deleted interfaces cannot be restored.

To delete an OSPF interface on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

    By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Interfaces tab.

    A table of OSPF interfaces is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click Delete next to the OSPF interface.
  6. In the confirmation window, click Delete.

    The OSPF interface is deleted and is no longer displayed in the table.

  7. In the upper part of the settings area, click Save to save the configuration of the CPE device.

To delete an OSPF interface on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN → CPE templates subsection.

    A table of CPE templates is displayed.

  2. Click the CPE template.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the OSPF → OSPF Interfaces tab.

    A table of OSPF interfaces is displayed.

  4. Click Delete next to the OSPF interface.
  5. In the confirmation window, click Delete.

    The OSPF interface is deleted and is no longer displayed in the table.

  6. In the upper part of the settings area, click Save to save the configuration of the CPE template.
Page top
[Topic 261979]