User`s guide

Configuring OSPF
Matrix DFE Series and N-SA User’s Guide 8-11
Configuring an OSPF NSSA
AsdescribedinOSPFAreasonpage 84,OSPFnetworksaregroupedintoareas.Routing
informationpassedbetweenareasisabstracted,potentiallyallowingasignificantreductionin
routingtraffic.
AnOSPFareacanbeconfiguredas:
•anormalarea(default),whichwouldnotrestrictLinkStateAdvertisements(LSAs),
•astubarea,
whichwouldnotallowLSAsfromexternalroutes,or
•aNotSoStubbyArea(NSSA),whichallowssomeadvertisementsfromexternalroutes.
Whilethestubareareducesthesizeofthelinkstatedatabase(LSDB),NSSAareaconfigurat ion
allowsLSDBreductionwhilestillpermittingtheimportingofselectedexternalroutes.External
routesthatarenotimportedintoanNSSAcanberepresentedbymeansofadefaultroute.This
configurationisusedwhenanOSPFinternetworkisconnectedtomultiplenonOSPFrouting
domains.
Procedure 8 2liststhestepsandtheassociatedcommandsnecessarytocompletetheNSSA
configurationprocess.Itassumes
thesametopologyusedinPerformingaBasicOSPF
Configurationonpage 89,onlythisexampleconfiguresarea1asanNSSA,addssecurity
parameters,andestablishesavirtuallinkbetweenarea1andtheOSPFbackbone.
Procedure 8-2 OSPF NSSA Configuration
Step Task Command
1. From switch mode, enter router mode on router 1. router 1
2. Enable router 1. enable
3. Enable global configuration mode. configure terminal
4. Enable interface configuration mode for VLAN 100. interface vlan 100
5. Configure MD5 authentication key 100, and the
associated password “ospfkey” to be used by
neighboring routers.
ip ospf message-digest-key 100
md5 ospfkey
6. Enable router configuration mode for OSPF
instance 1.
router ospf 1
7. Assign network interface 131.108.1.1 to area 1. network 131.108.1.1
255.255.255.0 area 1
8. Configure the area 1 router as an ABR, and set the
scope of the area.
area 1 range 131.108.1.1
255.255.255.0
9. Enable MD5 authentication for area 1. area 1 authentication message-
digest
10. Configure area 1 as an NSSA, allowed to generate
Type 7 LSAs.
area 1 nssa
11. Create a virtual link with MD5 authentication for the
ABR to represent a logical connection between area
1 and the OSPF backbone.
area 1 virtual-link 131.108.1.3
authentication-key 100