防火墙的动态路由
防火墙和一台路由器之间配置OSPF过程如下：
FW1：
ospf 1 router-id 10.10.10.10 ----------RID不能相同
area 0.0.0.0
network 202.100.1.0 0.0.0.255 ---------采用通配符方法
network 10.10.10.10 0.0.0.0
放行OSPF安全策略
默认情况防火墙只放行组播的报文，单播包不放行，需要配置安全策略
OSPF网络类型------OSPF报文的单播还是组播--------是否需要放行安全策略
第一步: 定义OSPF服务
ip service-set OSPF type object
service 0 protocol 89
第二步：配置安全策略
security-policy
rule name permit_ospf
source-zone local
source-zone untrust
destination-zone local
destination-zone untrust
source-address 202.100.1.10 mask 255.255.255.255
source-address 202.100.1.254 mask 255.255.255.255
destination-address 202.100.1.10 mask 255.255.255.255
destination-address 202.100.1.254 mask 255.255.255.255
service OSPF 调用OSPF对象
action permit
检查:
<FW1>display security-policy rule permit_ospf
(13 times matched) ----已经命令的安全策略
rule name permit_ospf
source-zone local
source-zone untrust
destination-zone local
destination-zone untrust
source-address 202.100.1.10 mask 255.255.255.255
source-address 202.100.1.254 mask 255.255.255.255
destination-address 202.100.1.10 mask 255.255.255.255
destination-address 202.100.1.254 mask 255.255.255.255
service OSPF
action permit
<FW1>
查看OSPF的邻居关系
[FW1]display ospf peer
17:17:32 2019/10/13
OSPF Process 1 with Router ID 10.10.10.10
Neighbors
Area 0.0.0.0 interface 202.100.1.10(G0/0/0)'s neighbors
Router ID: 1.1.1.1 Address: 202.100.1.254 GR State: Normal
State: Full Mode:Nbr is Slave Priority: 1
DR: 202.100.1.254 BDR: 202.100.1.10 MTU: 0
Dead timer due in 36 sec
Neighbor is up for 00:02:23
Authentication Sequence: [ 0 ]
查看路由表
[FW1]display ip routing-table protocol ospf
17:18:13 2019/10/13
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public Routing Table : OSPF
Destinations : 3 Routes : 3
OSPF Routing Table Status : <Active>
Destinations : 1 Routes : 1
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.1.1.1/32 OSPF 10 2 D 202.100.1.254 G0/0/0
==================================================
支付宝微信扫一扫，打赏作者吧～本文链接：https://www.kinber.cn/post/1947.html 转载需授权！
推荐本站淘宝优惠价购买喜欢的宝贝:
您阅读本篇文章共花了： 