CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Dynamic Routing
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-05-23
ehilden ehilden is offline
Junior Member
 
Join Date: 2007-04-26
Posts: 7
Rep Power: 0
ehilden has an average reputation (10+)
Default OSPF need some help

Sorry for the double post, but it looked like this fit better under this topic.

I have never setup OSPF before, my brain is about shot between reading the Checkpoint Secure Platform Pro and Advanced Routing Suite CLI.pdf on OSPF configuration, also I read the embedded NGX OSPF setup. I have also pulled out a lot of my old CISCO books in hopes of an example configuration.

Covering about 200 pages plus of material is hard to cover in a day. My brain is on overload.

http://www.uploading.com/files/A9UJG...e_CLI.pdf.html

Even after reading all this, taking notes, I still have no idea where to really begin or what is required for setup.

I have a SPLAT Pro R61 Box, and two edge devices to setup OSPF on.

I started with the following commands on the SPLAT Pro Box.
"enable"
"config t"
"router ospf 9999"

From about here, I am lost. I really do not know what is required with the "no advertise subnet", the authentication, being compatible.

Any help or documents is appreciated.
Reply With Quote
  #2 (permalink)  
Old 2007-05-23
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,603
Rep Power: 4
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: OSPF need some help

From the SK....


Product: SecurePlatform-Pro
Version: NGX
Last Modified: 06-Mar-2007
Partition: General
Status: Approved


Sr #:
Cr #:
Originator: Alexander Panich
Owner: David Kornfield
Technical Resource: Alexander Panich
Solution
Important: Please ensure that you are familiar with routing protocols before using this quick guide.

The following procedure provides step by step guidance on how to configure OSPF dynamic routing on SecurePlatform Pro:

1. Login to the SecurePlatform Device.

2. Enter Router Mode by running the command router or cligated.

Note: You can display all the available commands by typing <?> and pressing the "Enter" key.

3. Enter Privileged Execution mode by running the command enable. If this mode is password protected, you will be prompted for a password.

4. You can type show run to display the current configuration.

5. Enter Global Configuration Mode by running the command config terminal or config t.

6. OSPF can have several instances of routers.

Note: You should not configure several instances of OSPF on the same interface. You can, however, configure OSPF and other routing protocols on the same interface, e.g. OSPF and BGP.

At the config prompt (config)#, enable OSPF by running the command router ospf <number of instance>. You are now in Router Configuration mode. You must now configure the OSPF protocol.

Note: The prompt changes to (config-[protocol_name])# in Router Configuration mode. When in this mode, the order of the commands run is not important. Changes are only performed on exiting the mode.
To exit the Router Configuration mode and return one mode back, i.e. to the Global Configuration mode, run the exit command. To exit the Router Configuration mode and return to the Main mode, run the end command.


7. Specify on which interfaces OSPF will run, by using network <ipv4_address> <wildcard> area <area ID>.

(Example of Wildcard: If Network Mask = 255.255.255.0, then Wildcard = 0.0.0.255)

For example:
network 172.23.11.0 0.0.0.255 area 0.0.0.0
network 10.7.0.0 0.0.255.255 area 0.0.0.2

Note: In OSPF there are two hierarchal levels:
* Areas: Routing areas, whose IDs are represented in IP address form, e.g. 0.0.0.2

* Backbone Area: whose ID is represented as 0.0.0.0

8. You cannot filter OSPF updates within a specific area.

9. Enter <?> to see optional commands (e.g. redistribute). The redistribute command inserts external routes into a current instance of the OSPF protocol. You may want to redistribute direct or kernel routes into the OSPF advertisements. The command syntax is: redistribute <protocol>
* redistribute direct: Redistribute routes defined from sysconfig or SecurePlatform shell.

* redistribute kernel: Redistribute routes defined by OS according to interface IPs.

10. In OSPF, a router may either be:
* a backbone router (ABR) (area boundary router) connects area to the backbone.

* a regular router

11. On a given router, if you have not configured an ABR, i.e. a router having interfaces in the backbone area, you cannot configure the other interfaces to be in more than one area. Therefore, all the interfaces will be in the same area.


12. If you are using an ABR, configured to several areas, you should use summarization. This means that the ABR injects a summarized route for each local area into the backbone area. Summarization should be performed manually. This is due to network administration considerations. The command syntax is:
area <area ID> range <IP value> <netmask value>

For example: area 0.0.0.2 range 10.7.0.0 255.255.0.0
13. Sometimes there are several OSPF instances on the same router. It is recommended that you assign a router-id for each OSPF instance. The syntax is: router id <value>.

Notes:
* If you do not assign a specific router-id, it will be assigned automatically.

* Make sure that two routers with the same router-id are not located in the same area.

14. PIM protocol uses unicast routes in order to create a multicast traffic tree. This can only be done with unicast routes that are multicast eligible, i.e. potentially usable for multicast. You can configure that all routes learned from OSPF will be multicast eligible. To do this, run the command: multicast-rib.

15. Exit the Router Configuration mode and return one mode back, i.e. to the Global Configuration mode, by running the exit command.

16. After these values are entered, exit Router Configuration mode and then exit Global Configuration mode.


Once you return to the Privileged Execution mode, if you want these values to be saved through reboot or different gated sessions, you must store all the applied changes. Do so by running the command write memory.

For more detailed command syntaxes and additional information, refer to:CheckPoint_R62_SecurePlatformPro_and_Advanced_R outing_Suite_CLI Guide.
Reply With Quote
  #3 (permalink)  
Old 2007-05-23
ehilden ehilden is offline
Junior Member
 
Join Date: 2007-04-26
Posts: 7
Rep Power: 0
ehilden has an average reputation (10+)
Default Re: OSPF need some help

Thank you sir.

What SK# is that? I could not produce anything relating to configuring OSPF.
Reply With Quote
  #4 (permalink)  
Old 2007-05-23
ehilden ehilden is offline
Junior Member
 
Join Date: 2007-04-26
Posts: 7
Rep Power: 0
ehilden has an average reputation (10+)
Default Re: OSPF need some help

#sk32614

found it now.

weird when i type just OSPF that article never came up
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 22:19.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0