All OSPF protocol exchanges can be authenticated. This means that only routers with the correct
authentication can join the AS. Different authentication schemes can be used, like none, passphrase
or MD5 digest. It is possible to configure separate authentication methods for each AS.
OSPF Areas
OSPF allows sets of networks to be grouped together and this is called an OSPF Area. The topology
of an area is hidden from the rest of the AS. This information hiding reduces the amount of routing
traffic exchanged. Also, routing within the area is determined only by the area's own topology,
lending the area protection from bad routing data. An area is a generalization of an IP sub netted
network.
Components of OSPF
A more detailed description of OSPF area components is given below:
Areas
An area consists of networks and hosts within an AS that have been grouped
together. Routers that are only within an area are called internal routers, all
interfaces on internal routers are directly connected to networks within the
area. The topology of an area is hidden from the rest of the AS.
ABRs
Routers that have interfaces in more than one area are called Area Border
Routers (ABRs), these maintain a separate topological database for each area
to which they have an interface.
ASBRs
Routers that exchange routing information with routers in other Autonomous
Systems are called Autonomous System Boundary Router (ASBRs). They
advertise externally learned routes throughout the Autonomous System.
Backbone Areas
All OSPF networks need to have at least the backbone area, which is the area
with ID 0. This is the area that all other areas should be connected to, and the
backbone make sure to distribute routing information between the connected
areas. When an area is not directly connected to the backbone it needs a
virtual link to it.
Stub Areas
Stub areas are areas through which or into which AS external advertisements
are not flooded. When an area is configured as a stub area, the router will
automatically advertises a default route so that routers in the stub area can
reach destinations outside the area.
Transit Areas
Transit areas are used to pass traffic from an area that is not directly
connected to the backbone area.
The Designated Router
Each OSPF broadcast network has a designated router and a backup designated router. The routers
uses OSPF hello protocol to elect the DR and BDR for the network based on the priorities
advertised by all the routers. If there already are a DR on the network, the router will accept that
one, regardless of its own router priority.
Neighbors
Routers that are in the same area become neighbors in that area. Neighbors are elected via the Hello
protocol. Hello packets are sent periodically out of each interface using IP multicast. Routers
become neighbors as soon as they see themselves listed in the neighbor's Hello packet. This way, a
two way communication is guaranteed.
The following Neighbor States are defined:
4.5.2. OSPF
Chapter 4. Routing
149
Summary of Contents for 800 - DFL 800 - Security Appliance
Page 24: ...1 3 NetDefendOS State Engine Packet Flow Chapter 1 NetDefendOS Overview 24 ...
Page 69: ...2 6 4 Restore to Factory Defaults Chapter 2 Management and Maintenance 69 ...
Page 121: ...3 9 DNS Chapter 3 Fundamentals 121 ...
Page 181: ...4 7 5 Advanced Settings for Transparent Mode Chapter 4 Routing 181 ...
Page 192: ...5 5 IP Pools Chapter 5 DHCP Services 192 ...
Page 282: ...6 7 Blacklisting Hosts and Networks Chapter 6 Security Mechanisms 282 ...
Page 300: ...mechanism 7 3 7 SAT and FwdFast Rules Chapter 7 Address Translation 300 ...
Page 301: ...7 3 7 SAT and FwdFast Rules Chapter 7 Address Translation 301 ...
Page 318: ...8 3 Customizing HTML Pages Chapter 8 User Authentication 318 ...
Page 322: ...ALG 9 1 5 The TLS Alternative for VPN Chapter 9 VPN 322 ...
Page 377: ...Management Interface Failure with VPN Chapter 9 VPN 377 ...
Page 408: ...10 4 6 SLB_SAT Rules Chapter 10 Traffic Management 408 ...
Page 419: ...11 5 HA Advanced Settings Chapter 11 High Availability 419 ...
Page 426: ...12 3 5 Limitations Chapter 12 ZoneDefense 426 ...
Page 449: ...13 9 Miscellaneous Settings Chapter 13 Advanced Settings 449 ...