Configure IPv6 Routing with OSPFv3
This topic explains how to configure OSPFv3 on your Firebox.
Free Range Routing (Fireware v12.9 or Higher)
In Fireware v12.9 or higher, Fireware uses the Free Range Routing (FRR) routing engine, which replaces Quagga. If your configuration includes Quagga commands for dynamic routing, those commands work after you upgrade. Some FRR commands appear in a different section than in Quagga.
For a routing configuration file sample, go to Sample OSPFv3 Routing Configuration File (FRR).
For a list of commands, go to OSPFv3 Commands (FRR).
If your configuration includes the Quagga command router-id [A.B.C.D], this command automatically converts to the FRR command ospf6 router-id [A.B.C.D] if you upgrade from Fireware v12.8.x or lower to Fireware v12.9 or higher.
Quagga (Fireware v12.8.x or Lower)
Quagga is the routing daemon in Fireware v12.8.x or lower.
For a sample routing configuration file, go to Sample OSPFv3 Routing Configuration File (Quagga).
For a list of commands, go to OSPFv3 Commands (Quagga).
- Select Network > Dynamic Routing.
The Dynamic Routing page appears. - Select the Enable Dynamic Routing check box.
- Select the OSPFv3 tab.
- Select the Enable check box.
- Copy and paste your routing daemon configuration file in the text box.
For more information, go to About Sample Routing Configuration Files.
- Click Save.
If necessary, Fireware XTM automatically adds the required dynamic routing policy or enables an existing OSPF dynamic routing policy, if one exists.
To configure OSPFv3, from Policy Manager:
- Select Network > Dynamic Routing.
The Dynamic Routing Setup dialog box appears. - Select the Enable Dynamic Routing check box.
- Select the OSPFv3 tab.
- Select the Enable OSPF check box.
- Click Import to import a routing daemon configuration file, or copy and paste your configuration file in the text box.
For more information, go to About Sample Routing Configuration Files.
- Click OK.
If an enabled dynamic routing policy does not exist, Policy Manager asks if you want to add the required policy. - Click Yes to add the required dynamic routing policy.
Policy Manager adds the required dynamic routing policy, or enables an existing OSPF dynamic routing policy, if one exists.
For OSPFv3, the automatically created dynamic routing policy is called DR-OSPFv3-Allow. You can edit this policy to add authentication and restrict the policy to listen on only the correct interfaces. The DR-OSPFv3-Allow policy is configured to allow OSPF multicasts to the reserved multicast addresses for OSPFv3, FF02::5 and FF02::6.
After you configure the Firebox and the BGP router, you can look at the IPv6 routes table to verify that the Firebox has received route updates from the OSPFv3 router.
To see the dynamic routes, from Firebox System Manager select the Status Report tab.
To see the dynamic routes, from Fireware Web UI select System Status > Routes.