Configuring OSPF Timers (Hello/Dead)

[Michael_Wing]

Hi All,

A really simple quick question that I haven't been able to find an answer to in FortiNet documentation.

Can you configure FortiGate units on the CLI to sub second hello?

Something that expected on Cisco hardware, but everything I read on the FortiNet website points to a minimum hello timer of 1 second.

Has anyone had any experience of sub-second OSPF configuration on FortiGates? Is it even possible?

I have dual bearers on MPLS IPS provided backbone WAN with dual FortiGate's (various models 100D's, 200D's)  in HA active passive.

ISP landing on DMZ switch broadcast domain between IPS CE and Internal Firewall. I'm trying to achieve sub second fail over between links on the same subnet with OSPF.

If this is not possible, I take it an Active/Active configuration would be required with unique IP addresses on each WAN interface would be required.

Appreciate your feedback.

Cheers,

[Willem_Bargeman]

Hi Michael,

I think it's not possible to configure sub second timers. 

Take a look to BFD. That could be a much better solution! 

Regards, Willem

[Benoit_Rech_FTNT]

Hello,

like on cisco, you can have sub-second hello on the Fortigate

config router ospf

..

config ospf-interface

   edit <name>

        set hello-interval 1

        set hello-multiplier 4

  end

end

this will send OSPF hello packet every 250ms.

see (http://help.fortinet.com/fgt/handbook/cli52_html/index.html#page/FortiOS%25205.2%2520CLI/config_rout...)

Benoit

[Michael_Wing]

@Willem

Thanks for the reply, bit of quick reading and that is my solutions BFD, didn't realise that FortiGates supported it.

Many thanks for your feedback all :)