Skip to main content
peterk2020
Visitor III
December 7, 2022
Solved

Need to setup ospf over IPSEC tunnel

  • December 7, 2022
  • 1 reply
  • 1570 views

I'm having an issue with setting up OSPF over IPSEC tunnel.  

1. IPSEC tunnel is up.

2. Tunnel is up.  I can ping remote tunnel IP.

3. OSPF interface doesn't show the tunnel interface when I ran "get router info ospf interface".  It's not on the list.  

 

Any suggestions?

Best answer by JonathanTorian_FTNT

There's not a ton of information to make a good guess but I will start with some of the basics.

 

Do you have IP addresses assigned to the tunnel interfaces (on both sides)?  Also, what is your configuration for OSPF?  Do you have the IPSec tunnel interface IP space defined in the network statements?  You will need that for the OSPF adjacency to be established.

 

Here's a cookbook to get you started:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/632796/ospf-with-ipsec-vpn-for-network-redundancy

1 reply

JonathanTorian_FTNT
Staff
Staff
December 7, 2022

There's not a ton of information to make a good guess but I will start with some of the basics.

 

Do you have IP addresses assigned to the tunnel interfaces (on both sides)?  Also, what is your configuration for OSPF?  Do you have the IPSec tunnel interface IP space defined in the network statements?  You will need that for the OSPF adjacency to be established.

 

Here's a cookbook to get you started:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/632796/ospf-with-ipsec-vpn-for-network-redundancy

peterk2020
Visitor III
December 8, 2022

I had to include tunnel interface subnet on the network under ospf.  I forgot to include in there.  Thanks for your help.