Skip to main content
Michael_Wing
Michael_Wing
New Member
May 6, 2016
Question

Configuring OSPF Timers (Hello/Dead)

  • May 6, 2016
  • 1 reply
  • 12874 views

Hi All,

 

A really simple quick question that I haven't been able to find an answer to in FortiNet documentation.

 

Can you configure FortiGate units on the CLI to sub second hello?

 

Something that expected on Cisco hardware, but everything I read on the FortiNet website points to a minimum hello timer of 1 second.

 

Has anyone had any experience of sub-second OSPF configuration on FortiGates? Is it even possible?

 

I have dual bearers on MPLS IPS provided backbone WAN with dual FortiGate's (various models 100D's, 200D's)  in HA active passive.

 

ISP landing on DMZ switch broadcast domain between IPS CE and Internal Firewall. I'm trying to achieve sub second fail over between links on the same subnet with OSPF.

 

If this is not possible, I take it an Active/Active configuration would be required with unique IP addresses on each WAN interface would be required.

 

Appreciate your feedback.

 

Cheers,

    1 reply

    Willem_Bargeman
    Willem_Bargeman
    New Member
    May 12, 2016

    Hi Michael,

     

    I think it's not possible to configure sub second timers. 

    Take a look to BFD. That could be a much better solution! 

     

    Regards, Willem

    Benoit_Rech_FTNT
    Staff
    Benoit_Rech_FTNT
    Staff
    May 12, 2016

    Hello,

    like on cisco, you can have sub-second hello on the Fortigate

     

    config router ospf

    ..

    config ospf-interface

       edit <name>

            set hello-interval 1

            set hello-multiplier 4

      end

    end

     

    this will send OSPF hello packet every 250ms.

     

    see (http://help.fortinet.com/fgt/handbook/cli52_html/index.html#page/FortiOS%25205.2%2520CLI/config_router.20.34.html#ww1788855)

     

    Benoit

    Michael_Wing
    Michael_WingAuthor
    New Member
    May 12, 2016

    @Willem

     

    Thanks for the reply, bit of quick reading and that is my solutions BFD, didn't realise that FortiGates supported it.

     

    Many thanks for your feedback all :)

    Terms & ConditionsAccessibility statement