How to Configure OSPF Between Checkpoint and ASA

Опубликовано: 26 Апрель 2026
на канале: Manjunath Kulkarni
2,009
22

Checkpoint Configuration

set ospf area backbone on
set ospf interface eth1 area backbone on
set ospf interface eth1 priority 10
set ospf interface eth0 area backbone on
set ospf interface eth0 priority 10
set ospf area backbone range 192.168.1.0/24 on
set ospf area backbone range 192.168.2.0/24 on

Create a policy and allow the GW,ASA(Bi-direction) and multicast(only @destination) network

ASA Configuration

access-list permit_icmp extended permit icmp any any object-group ping
access-group permit_icmp in interface Outside

object-group icmp-type ping
icmp-object echo
icmp-object echo-reply
icmp-object traceroute
icmp-object unreachablesh

OSPF Configuration
router ospf 10(Process ID)
network 192.168.2.0 255.255.255.0 area 0
network 192.168.3.0 255.255.255.0 area 0
default-information originate

OSPF verification

ASA: show route / show ospf neighbor
Checkpoint: show ospf neighbors