Create core elements for dynamic routing
Create the elements that contain dynamic routing configuration information. The elements can be used in multiple Firewalls, Virtual Firewalls, and Firewall Clusters.
For more details about the product and how to configure features, click Help or press F1.
Steps
- Select Configuration.
- Browse to .
- Browse to BGP Elements, OSPFv2 Elements, or PIM Elements.
- Right-click the type of element that you want to create, then select New <element type>.
- Adjust the properties as needed, then click OK.
BGP Profile Properties dialog box
Use this dialog box to create a BGP Profile element.
For information about Quagga syntax, see http://www.nongnu.org/quagga/docs.html.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
Port | The port to use for BGP communications. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
Option | Definition |
---|---|
Distance tab | |
External (eBGP) | Enter the administrative distance for external BGP routes. |
Internal (iBGP) | Enter the administrative distance for internal BGP routes. |
Local (Aggregation) | Enter the administrative distance for local BGP routes. |
Subnets table Click Add to add a row to the table, or Remove to remove the selected row. |
|
Subnet | Double-click the cell to select a network element that represents the subnet to aggregate. |
Administrative Distance | Enter the administrative distance of the subnet. |
Option | Definition |
---|---|
Redistribution tab | |
Redistribute routes from table Select the check box next to the sources from where you want to redistribute routes. |
|
Source | The available sources are:
|
Filter | Double-click the cell to select a route map that you want to use as a filter. |
Seed Metric | If you do not want to use an automatic seed metric value, enter the value for the redistribute <source> metric command. |
Option | Definition |
---|---|
Aggregation tab Click Add to add a row to the table, or Remove to remove the selected row. |
|
Subnet | Double-click the cell to select a network element that represents the subnet to aggregate. |
Aggregation Mode | Uses the
aggregate-address command. Select from the following:
|
Autonomous System Properties dialog box
Use this dialog box to create an Autonomous System element.
Option | Definition |
---|---|
Name | The name of the element. |
Autonomous System (AS) Number | Enter the Autonomous System (AS) number in decimal notation. Move the mouse cursor over the number to see the number in dot notation. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
BGP Peering Properties dialog box
Use this dialog box to create a BGP Peering element.
For information about Quagga syntax, see http://www.nongnu.org/quagga/docs.html.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
Connection Profile | To select the BGP Connection Profile to use, click Select. |
TCP MD5 Password | Enter the TCP MD5 password used to authenticate to other BGP peers. Uses the command password $. If you do not enter a password, the password defined
in the BGP Connection Profile is used. By default, passwords and keys are not shown in plain text. To show the password or key, deselect the Hide option. Note: The password is shown in plain text when previewing the configuration in
Quagga format.
|
Filter Type | The type of filter to use as an inbound or outbound filter. |
Inbound Filter | Double-click the cell to select the Access List or Route Map to use as an inbound filter. |
Outbound Filter | Double-click the cell to select the Access List or Route Map to use as an outbound filter. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
Option | Definition |
---|---|
Advanced tab | |
Local AS (eBGP Only) | Uses the local-as command. Select from the following:
|
Maximum Prefix | Uses the
maximum-prefix command. Select from the following:
|
Send Community | Uses the
send-community command. Select from the following:
|
Connected Check | Uses the
disable-connected-check command. Select from the following:
|
TTL Check Mechanism | Select from the following:
|
Remove Private AS (eBGP Only) | Uses the remove-private-AS command. |
Soft Reconfiguration Inbound | Uses the soft-reconfiguration inbound command. |
Don't Send Capabilities | Uses the dont-capability-negotiate command. |
Override Received Capabilities | Uses the override-capability command. |
Route Reflector Client (iBGP Only) | Uses the route-reflector-client command. |
Next Hop Self | Uses the next-hop-self command. |
Outbound Route Filtering (ORF) | Uses the
capability orf prefix-list command. Select from the following:
|
IP Prefix Access List | Shows the Prefix list to be used for the Send and Send and Receive options for the Outbound Route Filtering (ORF) command. To select the IP Prefix Access List to use, select the Access List as the inbound filter on the General tab. |
BGP Connection Profile Properties dialog box
Use this dialog box to create a BGP Connection Profile element.
Option | Definition |
---|---|
Name | The name of the element. |
TCP MD5 Password | Enter the TCP MD5 password used to authenticate to other BGP peers. By default, passwords and keys are not shown in plain text. To show the password or key, deselect the Hide option. Note: The password is shown in plain text when previewing
the configuration in Quagga format.
|
Timer Settings section | |
Session Keep Alive Timer | Enter the value for the timers <keep alive value> <hold value> command in seconds. |
Session Hold Timer | Enter the value for the timers <keep alive value> <hold value> command in seconds. |
Connect Retry Timer | Enter the value for the timers connect $ command in seconds. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
External BGP Peer Properties dialog box
Use this dialog box to create an External BGP Peer element.
Option | Definition |
---|---|
Name | The name of the element. |
IP Address | The IP address of the external BGP Peer. |
Port | The port used to send the BGP routing information. |
Autonomous System (AS) | Select the Autonomous System element to use. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
OSPFv2 Domain Settings dialog box
Use this dialog box to create an OSPFv2 Domain Settings element.
For information about Quagga syntax, see http://www.nongnu.org/quagga/docs.html.
Option | Definition |
---|---|
Name | The name of the element. |
ABR Type | Set the value for ospf abr-type . If an area border router (ABR) does not have a working connection to
area 0 by the standard definition, it should not consider routes through non-backbone areas as valid.
|
Throttle Timer Settings section Throttle timers define the time between consecutive shortest path first (SPF) calculations. The initial delay is the time between an event triggering SPF calculation and the calculation being complete. Hold timers define the delay between SPF calculations. The timer increases from the initial hold time until the maximum hold time is reached. The hold time resets if SPF calculation is not triggered in adaptive hold time. This feature prevents SPF calculations from consuming resources. |
|
Initial delay | Set the value for the timers throttle spf delay command in milliseconds. |
Initial Hold Time | Set the value for the timers throttle spf initial-holdtime command in milliseconds. |
Max Hold Time | Set the value for timers throttle spf max-holdtime in milliseconds. |
Max Metric Router LSA section The link-state advertisement (LSA) metric settings can be used to route traffic around a router while it starts up or shuts down. This option causes transit links to be advertised at an infinite distance, causing the rest of the network to use alternative routes. This option requires redundant routes to be available. |
|
On Startup | Set the value for the max-metric router-lsa on-startup command in seconds. |
On Shutdown | Set the value for the max-metric router-lsa on-shutdown command in seconds. |
Auto-Cost Reference Bandwidth | Set the value for the auto-cost reference-bandwidth command in megabits per second. This value is used in OSPF cost
calculation.
|
Deprecated Path Reference Algorithm (RFC 1583 Compatibility) | Select this option for compatibility with RFC 1583. This option removes the routing loop prevention mechanism defined in RFC 2328. We do not recommend selecting this option. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
OSPFv2 Profile dialog box
Use this dialog box to create an OSPFv2 Profile element.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
OSPFv2 Domain Settings | Select the OSPFv2 Domain Settings element to use. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
Option | Definition |
---|---|
Distance tab | Intra area settings affect routes in the same area. Inter area settings affect routes advertised to other areas. The external distance changes the administrative distance of redistributed routes. |
Intra Area Distance (O) | Enter the distance value for the intra-area command. |
Inter Area Distance (O IA) | Enter the distance value for the inter-area command. |
External Distance (E1-E2) | Enter the distance value for the external command. |
Option | Definition |
---|---|
Redistribution tab Use this tab to redistribute external routes to OSPF. |
|
Default Metric | Enter the value for the default-metric command. |
OSPF Redistribute routes from table Select the check box next to the sources from where you want to redistribute routes. |
|
Source | The available sources are:
|
Filter | Double-click the cell to select a route map or IP access list that you want to use as a filter. |
Metric Type | Select the value for the redistribute <source> metric-type $ command. |
Seed Metric | If you do not want to use an automatic seed metric value, enter the value for the redistribute <source> metric command. |
OSPFv2 Interface Settings dialog box
Use this dialog box to create an OSPFv2 Interface Settings element.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
Authentication Type | Select the type of authentication to use. If you select Password, enter the password in the Password field. If you select Message Digest, select an OSPV2 Key Chain element to use. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
Option | Definition |
---|---|
Advanced tab | |
Interface Cost | Enter the interface cost value for the cost command. |
Router Priority | Enter the value for the priority command. |
Retransmit Interval | Enter the value for the retransmit-interval command in seconds. |
Transmit Delay | Enter the value for the transmit-delay command in seconds. |
MTU mismatch detection | Select this option to use the mtu-ignore option. |
Hello Interval Type | Select the type of hello interval to use.
|
Hello Interval | (When Hello Interval Type is Normal) Enter the value for thehello-interval command in seconds. |
Dead Interval Multiplier | (When Hello Interval Type is Fast Hello) Select a value from 1-10. The value for thedead-interval command is
multiplied by this value. |
Dead Interval | Enter the value for the dead-interval command in seconds.When Hello Interval Type is Fast Hello, the value is 1 second. |
OSPFv2 Area dialog box
Use this dialog box to create an OSPFv2 Area element.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
Area ID | Enter the ID for the area. |
Area Type | Select the type of area to use.
|
Default Interface Settings | Select the OSPFv2 Interface Settings element to use for the OSPFv2 area. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
Option | Definition |
---|---|
ABR tab Click Add to add a row to the table, or Remove to remove the selected row. |
|
Subnet | To select the network, double-click the Subnet cell. |
Summarized for other areas | Select from the following options for the summary-address command:
|
Area Default Cost | Enter the value for the default-cost command. |
Shortcut capable Area | Uses the shortcut option. |
Filter table Select inbound and outbound filters for the IP Access List and IP Prefix List. |
Option | Definition |
---|---|
Virtual Links tab Click Add to add a row to the table, or Remove to remove the selected row. Add the router IDs for endpoints A and B. To use an alternative OSPFv2 Interface Settings element, double-click the Interface Settings cell. |
OSPFv2 Key Chain dialog box
Use this dialog box to create an OSPFv2 Key Chain element.
Option | Definition |
---|---|
Name | The name of the element. |
Key Chain table Click Add to add a row to the table, or Remove to remove the selected row. |
|
Send Key | When you have several rows of keys, select which key is valid. |
Key ID | A unique identifier for the key. |
Key | Enter the key. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
PIM Profile Properties dialog box
Use this dialog box to create a PIM Profile element.
Option | Definition |
---|---|
General tab | |
Name | The name of the element. |
PIM Profile table Click Add to add a row to the table, or Remove to remove the selected row. |
|
Multicast Group | Enter a multicast IPv4 network. |
PIM Mode | Select from the following:
|
RP or Mapping | (When PIM Mode is PIM-SM or PIM-SSM) Enter the rendezvous point (RP) IP address for PIM-SM or define the mapping for PIM-SSM.
|
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
Option | Definition |
---|---|
Advanced tab | |
Hello Interval | Enter how often hello messages are sent in seconds. |
Join-Prune Interval | Enter how often joined/prune messages are sent in seconds. |
SPT Switch Threshold | This setting determines when to switch from a shared tree that routes through a designated router (DR), to a shortest-path tree (SPT). Select the unit from the drop-down list.
|
SPT Switch Interval | Enter how frequently the SPT switch threshold state is checked in seconds. |
Smart Multicast Antispoofing | When selected, antispoofing rules are automatically configured to avoid inadvertently blocking multicast traffic. We recommend that you enable this option. |
PIM Interface Settings dialog box
Use this dialog box to create a PIM Interface Settings element.
Option | Definition |
---|---|
Name | The name of the element. |
IGMP Settings | Select an IGMP Querier Settings element. The element defines the IGMP version and query parameters. |
DR Priority | Enter the designated router (DR) priority that is advertised in hello messages. |
ZBR for Groups | Enter multicast groups for zone border routers (ZBR). To enter multiple multicast groups, separate them with a comma. The listed multicast groups do not pass through the interface. |
Random Delay | Enter the random delay before hello messages are sent. The delay prevents PIM routers from receiving multiple hello messages at the same time. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |
IGMP Querier Settings dialog box
Use this dialog box to create an IGMP Querier Settings element.
Option | Definition |
---|---|
Name | The name of the element. |
IGMP Version | Select the version of IGMP to use. |
Query Interval | Enter how often the hello packet is sent in seconds. This option is not supported when IGMP Version is IGMPv1. |
Robustness | Enter the robustness value. If you expect packet loss in the network, increase this value to send more IGMP messages. This option is not supported when IGMP Version is IGMPv1 or when the IGMP Querier Settings element is used for PIM. |
Comment (Optional) |
A comment for your own reference. |
Category (Optional) |
Includes the element in predefined categories. Click Select to select a category. |