Lab 1.
01
Establishing neighboring - Solution
Lab 1.01 - Establishing neighboring
Resolution
config router ospf
set router-id [Link] RT-DC01
config area
edit [Link]
next
end
config network
edit 1
set prefix [Link] [Link]
next
edit 2
set prefix [Link] [Link]
next
edit 3
set prefix [Link] [Link]
next
end
end
13
Lab 1.01 - Establishing neighboring
Resolution
config router ospf
set router-id [Link] RT-DC02
config area
edit [Link]
next
end
config network
edit 1
set prefix [Link] [Link]
next
edit 2
set prefix [Link] [Link]
next
edit 3
set prefix [Link] [Link]
next
end
end
14
Lab 1.01 - Establishing neighboring
Resolution
FGT-DC01
config router ospf config router ospf
set router-id [Link] config network
config area edit 1
edit [Link] set prefix [Link] [Link]
next next
end edit 2
config ospf-interface set prefix [Link] [Link]
edit "ipsec1" next
set interface "VPN_DC01A" edit 3
set network-type point-to-multipoint set prefix [Link] [Link]
next next
edit "ipsec2" edit 4
set interface "VPN_DC01B" set prefix [Link] [Link]
set network-type point-to-multipoint next
next end
edit "ipsecS2S" end
set interface "VPN_S2S_A"
set network-type point-to-point
next
end
15
Lab 1.01 - Establishing neighboring
Resolution
FGT-DC02
config router ospf config router ospf
set router-id [Link] config network
config area edit 1
edit [Link] set prefix [Link] [Link]
next next
end edit 2
config ospf-interface set prefix [Link] [Link]
edit "ipsec1" next
set interface "VPN_DC02A" edit 3
set network-type point-to-multipoint set prefix [Link] [Link]
next next
edit "ipsec2" edit 4
set interface "VPN_DC02B" set prefix [Link] [Link]
set network-type point-to-multipoint next
next end
edit "ipsecS2S" end
set interface "VPN_S2S_A"
set network-type point-to-point
next
end
16
Lab 1.01 - Establishing neighboring
Resolution
FGT-S01
config router ospf config router ospf
set router-id [Link] config network
config area edit 1
edit [Link] set prefix [Link] [Link]
next next
end edit 2
config ospf-interface set prefix [Link] [Link]
edit "DC1_A" next
set interface "VPN_DC01A" edit 3
set network-type point-to-multipoint set prefix [Link] [Link]
next next
edit "DC1_B" edit 4
set interface "VPN_DC01B" set prefix [Link] [Link]
set network-type point-to-multipoint next
next edit 5
edit "DC2_A" set prefix [Link] [Link]
set interface "VPN_DC02A" next
set network-type point-to-multipoint end
next end
edit "DC2_B"
set interface "VPN_DC02B"
set network-type point-to-multipoint
next
end
17
Lab 1.01 - Establishing neighboring
Resolution
FGT-S02
config router ospf config router ospf
set router-id [Link] config network
config area edit 1
edit [Link] set prefix [Link] [Link]
next next
end edit 2
config ospf-interface set prefix [Link] [Link]
edit "DC1_A" next
set interface "VPN_DC01A" edit 3
set network-type point-to-multipoint set prefix [Link] [Link]
next next
edit "DC1_B" edit 4
set interface "VPN_DC01B" set prefix [Link] [Link]
set network-type point-to-multipoint next
next edit 5
edit "DC2_A" set prefix [Link] [Link]
set interface "VPN_DC02A" next
set network-type point-to-multipoint end
next end
edit "DC2_B"
set interface "VPN_DC02B"
set network-type point-to-multipoint
next
end
18
Lab 1.01 - Establishing neighboring
Describing the Resolution
On RT-DC01 and RT-DC02:
We just enable the OSPF process;
Create the area 0 (backbone area)
And set the networks that will participate of the OSPF Network. All the three
networks are declared.
19
Lab 1.01 - Establishing neighboring
Describing the Resolution
On FGT-DC01 and FGT-DC02: Here we have more work to do…
We need to enable the OSPF process;
Create the area 0 (backbone area);
Set the networks that will participate of the OSPF Network. Here we have
four networks to use, the transit between the HUBs and Routers, the
network used in the VPNs to the spokes and the network used to the Site-
to-site VPN.
And an extra task is mandatory here, we need to declare all the three VPNs
interfaces inside the OSPF configuration and set the network-type to each
one of that interfaces.
20
Lab 1.01 - Establishing neighboring
Describing the Resolution
On FGT-S01 and FGT-S02:
We need to enable the OSPF process;
Create the area 0 (backbone area);
Set the networks that will participate of the OSPF Network. Here we have
five networks to use, the LAN network, and the four networks used in the
VPNs to the Hubs.
An extra task is mandatory here, we need to declare all the four VPNs
interfaces inside the OSPF configuration and set the network-type to each
one of that interfaces.
21