Description | This article explains the configuration steps required for OSPF with virtual wire pair interfaces. |
Scope | FortiGate. |
Solution |
Router 1 and 2 exchange OSPF hello packets through the FortiGate virtual wire pair interfaces (port9, port10).
Virtual Wire Pair (VWP) Configuration:
VWP Policy:
By default, FortiGate does not forward multicast traffic. Due to this, OSPF hello packets sent over multicast addresses 224.0.0.5 and 224.0.0.6 will be dropped at the firewall. To configure the multicast forwarding, make sure the multicast policy is enabled. In the GUI Navigate to the System -> Feature Visibility -> Multicast Policy and enable the option.
Create a Multicast Policy between VWP Interfaces:
OSPF will established between routers.
Related articles: Technical Tip: Creating a virtual wire pair Technical Tip: Virtual Wire Pair (VWP) and connectivity with Non-VWP interfaces |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.