firewalls Huawei y routers ejecutan configuración del protocolo OSPF entre el caso (disponible ahora hacer)

Dinámica cortafuegos de enrutamiento

 entre el firewall y un router configurado OSPF de la siguiente manera:

FW1：
ospf 1 router-id 10.10.10.10 ----------RID不能相同 
 area 0.0.0.0 
  network 202.100.1.0 0.0.0.255  ---------采用通配符方法 
  network 10.10.10.10 0.0.0.0  

política de seguridad de liberación de OSPF

 default servidor de seguridad sólo liberar los paquetes de multidifusión, paquetes unicast no liberan, lo que necesita para configurar la política de seguridad
 OSPF tipo de red de paquetes OSPF ------ unicast o multicast si -------- necesitamos liberar la política de seguridad
PASO 1: servicio de OSPF

ip service-set OSPF type object
 service 0 protocol 89   

Paso dos: Configurar Política de Seguridad

 security-policy
 rule name permit_ospf
  source-zone local
  source-zone untrust
  destination-zone local
  destination-zone untrust
  source-address 202.100.1.10 mask 255.255.255.255
  source-address 202.100.1.254 mask 255.255.255.255
  destination-address 202.100.1.10 mask 255.255.255.255
  destination-address 202.100.1.254 mask 255.255.255.255
  service OSPF      调用OSPF对象
  action permit

Compruebe:

<FW1>display security-policy  rule   permit_ospf  
  (13 times matched)    ----已经命令的安全策略
 rule name permit_ospf
  source-zone local
  source-zone untrust
  destination-zone local
  destination-zone untrust
  source-address 202.100.1.10 mask 255.255.255.255
  source-address 202.100.1.254 mask 255.255.255.255
  destination-address 202.100.1.10 mask 255.255.255.255
  destination-address 202.100.1.254 mask 255.255.255.255
  service OSPF
  action permit
<FW1>

Comprobar la relación de vecino OSPF

[FW1]display  ospf peer   
17:17:32  2019/10/13

         OSPF Process 1 with Router ID 10.10.10.10
                 Neighbors 

 Area 0.0.0.0 interface 202.100.1.10(G0/0/0)'s neighbors
 Router ID: 1.1.1.1          Address: 202.100.1.254    GR State: Normal     
   State: Full  Mode:Nbr is  Slave  Priority: 1
   DR: 202.100.1.254  BDR: 202.100.1.10  MTU: 0    
   Dead timer due in 36  sec 
   Neighbor is up for 00:02:23     
   Authentication Sequence: [ 0 ] 

Ver la tabla de enrutamiento

[FW1]display ip routing-table protocol ospf  
17:18:13  2019/10/13
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public Routing Table : OSPF
         Destinations : 3           Routes : 3

OSPF Routing Table Status : <Active>
         Destinations : 1           Routes : 1

Destination/Mask    Proto   Pre  Cost     Flags NextHop         Interface

       1.1.1.1/32         OSPF    10   2           D  202.100.1.254   G0/0/0
==================================================