R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

Table Of Contents
405
11.2.1.2/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
5. Configure summary route 10.0.0.0/8 on Firewall and advertise it:
[Firewall-ospf-1] asbr-summary 10.0.0.0 8
# Display the routing table of Router A.
[RouterA] display ip routing-table
Routing Tables: Public
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost NextHop Interface
10.0.0.0/8 O_ASE 150 2 11.2.1.1 GE0/1
11.2.1.0/24 Direct 0 0 11.2.1.2 GE0/1
11.2.1.2/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
The output shows that routes 10.1.1.0/24, 10.2.1.0/24, 10.3.1.0/24 and 10.4.1.0/24 are
summarized into one route 10.0.0.0/8.
Configuring an OSPF stub area at the CLI
Network requirements
Figure 266 shows an AS is split into three areas, where all routers run OSPF. Router A and Router B act
as ABRs to forward routing information between areas. Firewall B acts as the ASBR and is enabled to
redistribute static routes.
Configure Area 1 as a Stub area, reducing LSAs to this area without influencing route reachability.
Figure 266 OSPF Stub area configuration
Configuration procedure
1. Configure IP addresses for interfaces. (Details not shown)
2. Configure OSPF basic functions (see “Configuring OSPF basic functions at the CLI”).
3. Configure Firewall B to redistribute static routes:
<FirewallB> system-view
[FirewallB] ip route-static 3.1.2.1 24 10.5.1.2