Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Liza1
New Contributor II

Fortigate OSPF routes

Hello, i need your help.
You have one FortiGate and two routers. You need the FortiGate to know routes but not advertise them to the routers. For example, you have Area 10 where Router1 advertises 192.168.0.0/24, and Area 20 where Router2 advertises 192.168.100.0/24. However, when you check Router1, it also knows about Router2's network 192.168.100.0/24. This should not happen. How can you separate these networks? Can route maps or ACLs help? Have you encountered such a situation before? Any information would be valuable to me.


#fortigate #ospf #routemap #acl #routingtable #routes

2 Solutions
srajeswaran
Staff
Staff

Please check https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-OSPF-to-filter-Inter-Area-rout...

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.

View solution in original post

Toshi_Esumi
SuperUser
SuperUser

Or, if you configure those two areas as "totally stub" at the FGT like below, each router wouldn't get routes from the other side (inter-area routes). It would advertise a default route instead though.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuration-of-OSPF-Stub-Totally-Stub-NS...
You still need to know how to configure "stub" on the router side.

Toshi

View solution in original post

2 REPLIES 2
srajeswaran
Staff
Staff

Please check https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-OSPF-to-filter-Inter-Area-rout...

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
Toshi_Esumi
SuperUser
SuperUser

Or, if you configure those two areas as "totally stub" at the FGT like below, each router wouldn't get routes from the other side (inter-area routes). It would advertise a default route instead though.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuration-of-OSPF-Stub-Totally-Stub-NS...
You still need to know how to configure "stub" on the router side.

Toshi

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors