topic Re: OSPF Area Question in Next-Generation Firewall Discussions

OSPF Area Question

alexpf — Fri, 06 Sep 2024 14:59:49 GMT

Can you have an area be normal on 1 interface and NSSA on another interface?

Say you have area 1.

Area 1 has neighbor on interface 1 with normal type.

Can another Area 1 interface be brought online on different interface 2 with NSSA type?

Re: OSPF Area Question

M.Anderson — Fri, 06 Sep 2024 19:55:23 GMT

I don't see why not as long as you have a 3rd interface in Area 0. The different Area types represent different LSA types so you will see both LSA types in your LSDB. An interesting question for sure as I've never actually done it. We do run a lot of NSSA areas within our DC.

Re: OSPF Area Question

alexpf — Sat, 07 Sep 2024 00:37:42 GMT

Thanks for the response. There is not interface in Area 0 and the existing area is configured as a normal area which I was wondering if I could make another interface in that same area NSSA. I know it can be done with OSPF virtual-link and different area, but was trying to save that.

I am asking the question because we tried to just send the default route out the interface in question, but OSPF learns all of the routes in the area.

<-- router area 0/router area 1 --> <-- palo interface 1 area 1/palo interface 2 area 1 -->

<-- router area 0/router area 1 --> <-- palo interface 1 area 1/palo interface 3 area 1 --> trying to make this interface NSSA or just get summary route.

Current thoughts are OSPF virtual-link and new area or switch to BGP.

Re: OSPF Area Question

alexpf — Sun, 08 Sep 2024 23:15:18 GMT

Has anybody tried this?