[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] GateD for OSPF on FW-1
Duke, I've done this very successfully for 3 years now. Here's a sanatized sample config. Note that costing is extremely important, as you do NOT want to wind up in a asnycronously routed position. So, obviously costs need to be thought out VERY far in advance, and you might want to play with the routerdead and hello intervals, but here's one I'm using: --------------/etc/gated.conf------------------ # interfaces { interface all passive; }; autonomoussystem 100; routerid 192.168.2.5; rip no; ospf yes { # backbone { # authtype none; area 100 { networks { 192.168.0.0 mask 255.255.248.0 ; x.x.x.0 mask 255.255.254.0 ; }; interface hme0 cost 3 { retransmitinterval 5; transitdelay 1; priority 8; hellointerval 1; routerdeadinterval 2; }; interface qfe0 cost 1 { retransmitinterval 5; transitdelay 1; priority 1; hellointerval 1; routerdeadinterval 2; }; interface qfe1 cost 7 { retransmitinterval 5; transitdelay 1; priority 1; hellointerval 1; routerdeadinterval 2; }; interface qfe2 cost 3 { retransmitinterval 5; transitdelay 1; priority 1; hellointerval 1; routerdeadinterval 2; }; }; }; --------------/etc/gated.conf------------------ Hope this helps! Jason "Glover, Duke" wrote: > > FW-1 3.0b VPN 3083 > Solaris 2.6 > > Is anyone using GateD for OSPF with FW-1 ? I'm looking for success and/or > un-success stories. Also, if anyone would be willing to share a "sanitized" > GateD configuration file to look at, it will be greatly appreciated. > > AtDhVaAnNkCsE, > > Duke Glover > desk => page => [email protected] > Verizon / Enterprise Information Protection Services > > ================================================================================ > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================================================ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|