Skip to main content
LarW63
New Member
September 8, 2017
Question

OSPF - Subnet Summarization to Reduce Routing Table Size

  • September 8, 2017
  • 5 replies
  • 12283 views

Hi,

We have Fortigates (FortiOS 5.4.5) running at multiple locations using site-site VPNs and OSPF dynamic routing. Also, at each location, there are multiple subnets (interfaces) configured.

 

When we look at the routing table it's getting excessively large. Fortunately, each location has a uniform IP assignment, which would allow all of the subnets to be summarized into one larger network.

 

I've tried several different combinations of CLI: Config Router OSPF -> Config Area -> Config Range -> Set Prefix and Set Substitute but it seems that I get mixed results. I'm also having trouble finding documentation detailing how to summarize several smaller subnets into one larger network.

 

Does anyone have a link to documentation showing how this is supposed to be configured? Or, does anyone have input on the following questions?

 

- For prefixes, is this an exact match? Or, is this an equal to or greater than mask length match? - I assume that substitute and substitute-status defines and enables/disables the summarizing of addresses matched by the prefix. Is this assumption correct? - What's the purpose of advertise enable/disable?

 

If there is a alternate/better way to achieve summarization, I'd be interested in that too.

 

Thanks your for time.

Larry

    5 replies

    LarW63
    LarW63Author
    New Member
    September 8, 2017

    Hi,

     

    One further aspect...  The VPNs between the Fortigates are in Area 0.0.0.0 while the subnets at each Fortigate are in separate areas, making each Fortigate an ABR (Area Border Router).

     

    Larry

    emnoc
    New Member
    September 9, 2017

    Will if the   fortigates at the spoke are true ABR than route-summary should be a ease.

     

     

    You should look at the area  range command, the fortigate wan routing guide has numerous examples on how to deploy  dynamic-routing

     

    question you should ask and review

     

    [ul]
  • Do you  need inter-area routing[/ul]

     

    [ul]
  • can a stub work[/ul]

     

    [ul]
  • Are your spokes a ABR only or ABR+ASBR  and  have numerous redistributes  TYPE-5 LSAs[/ul]

     

    Only you know those answers, based on those answer you can optimized the OSPF routing

     

    Ken

     

     

     

  • Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT