D-Link DFL-260E User Manual page 187

Network security firewall netdefendos version 2.27.03
Hide thumbs Also See for DFL-260E:
Table of Contents

Advertisement

4.5.3. OSPF Components
Is stub area
Become Default Router
Import Filter
The import filter is used to filter what can be imported in the OSPF AS from either external sources
(like the main routing table or a policy based routing table) or inside the OSPF area.
External
Interarea
4.5.3.3. OSPF Interface
This section describes how to configure an OSPF Interface object. OSPF interface objects are
children of OSPF areas. Unlike areas, they are not similar on each NetDefend Firewall in the OSPF
network. The purpose of an OSPF interface object is to describe a specific interface which will be
part of an OSPF network.
General Parameters
Interface
Network
Interface Type
There can only be one backbone area and it forms the central
portion of an AS. Routing information that is exchanged between
different area always transits the backbone area.
Enable this option if the area is a stub area.
It is possible to configure if the firewall should become the default
router for the stub area, and with what metric.
Specifies the network addresses allowed to be imported into this OSPF area from
external routing sources.
Specifies the network addresses allowed to be imported from other routers inside the
OSPF area.
Note: Different interface types can be used with OSPF interfaces
Note that an OSPF Interface does not always correspond to a physical interface
although this is the most common usage. Other types of interfaces, such as a VLAN,
could instead be associated with an OSPF Interface.
Specifies which interface on the firewall will be used for this OSPF
interface.
Specifies the network address for this OSPF interface.
This can be one of the following:
Auto - Tries to automatically detect interface type. This can be used for
physical interfaces.
Broadcast - The Broadcast interface type is an interface that has native
Layer 2 broadcast/multicast capabilities. The typical example of a
broadcast/multicast network is an ordinary physical Ethernet interface.
When broadcast is used, OSPF will send OSPF Hello packets to the IP
multicast address 224.0.0.5. Those packets will be heard by all other the
OSPF routers on the network. For this reason, no configuration of OSPF
Neighbor objects is required for the discovery of neighboring routers.
Point-to-Point - Point-to-Point is used for direct links which involve
only two routers (in other words, two firewalls). A typical example of
this is a VPN tunnel which is used to transfer OSPF traffic between two
firewalls. The neighbor address of such a link is configured by defining
187
Chapter 4. Routing

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents