9-10
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 9 Configuring IP Routing
Configuring OSPF
You can either use the
match
options in this command to match and set route properties, or you can
use a route map. The
tag
and
subnets
options do not have equivalents in the
route-map
command.
If you use both a route map and
match
options in the
redistribute
command, then they must match
•
To redistribute routes from a RIP routing process into the OSPF routing process, enter the following
command:
hostname(config-router):
redistribute rip
[
metric
metric-value
]
[
metric-type
{
type-1
|
type-2
}] [
tag
tag_value
] [
subnets
] [
route-map
map_name
]
•
To redistribute routes from an EIGRP routing process into the OSPF routing process, enter the
following command:
hostname(config-router):
redistribute eigrp
as-num
[
metric
metric-value
]
[
metric-type
{
type-1
|
type-2
}] [
tag
tag_value
] [
subnets
] [
route-map
map_name
]
The following example shows route redistribution from OSPF process 1 into OSPF process 2 by
matching routes with a metric equal to 1. The security appliance redistributes these routes as external
LSAs with a metric of 5, metric type of Type 1, and a tag equal to 1.
hostname(config)#
route-map 1-to-2 permit
hostname(config-route-map)#
match metric 1
hostname(config-route-map)#
set metric 5
hostname(config-route-map)#
set metric-type type-1
hostname(config-route-map)#
set tag 1
hostname(config-route-map)#
router ospf 2
hostname(config-router)#
redistribute ospf 1 route-map 1-to-2
The following example shows the specified OSPF process routes being redistributed into OSPF
process 109. The OSPF metric is remapped to 100.
hostname(config)#
router ospf 109
hostname(config-router)#
redistribute ospf 108 metric 100 subnets
The following example shows route redistribution where the link-state cost is specified as 5 and the
metric type is set to external, indicating that it has lower priority than internal metrics.
hostname(config)#
router ospf 1
hostname(config-router)#
redistribute ospf 2 metric 5 metric-type external
Configuring OSPF Interface Parameters
You can alter some interface-specific OSPF parameters as necessary. You are not required to alter any
of these parameters, but the following interface parameters must be consistent across all routers in an
attached network:
ospf hello-interval
,
ospf dead-interval
, and
ospf authentication-key
. Be sure that if
you configure any of these parameters, the configurations for all routers on your network have
compatible values.
To configure OSPF interface parameters, perform the following steps:
Step 1
To enter the interface configuration mode, enter the following command:
hostname(config)#
interface
interface_name
Step 2
Enter any of the following commands:
•
To specify the authentication type for an interface, enter the following command:
Summary of Contents for 500 Series
Page 38: ...Contents xxxviii Cisco Security Appliance Command Line Configuration Guide OL 12172 03 ...
Page 45: ...P A R T 1 Getting Started and General Information ...
Page 46: ......
Page 277: ...P A R T 2 Configuring the Firewall ...
Page 278: ......
Page 561: ...P A R T 3 Configuring VPN ...
Page 562: ......
Page 891: ...P A R T 4 System Administration ...
Page 892: ......
Page 975: ...P A R T 5 Reference ...
Page 976: ......