Open Shortest Path First (OSPF)

Network layout and assumptions

There are four FortiGate units in this network topology acting as OSPF routers:


Advanced inter-area OSPF network topology

Area is a stub area with one FortiGate unit OSPF router called Router1 (DR). Its only access outside of that area is a default route to the backbone area, which is how it accesses the Internet. Traffic must go from the stub area, through the backbone, to the third area to reach the Internet. The backbone area in this configuration is called a transit area. Also in area there is a RIP router that will be providing routes to the OSPF area through redistribution.

Area is the backbone area, and has two FortiGate unit routers named Router2 (BDR) and Router3 (DR). Area is a regular area that has an Internet connection accessed by both the other two OSPF areas. There is only one FortiGate unit router in this area called Router4 (DR). This area is more secure and requires MD5 authentication by routers.

All areas have user networks connected, but they are not important for configuring the network layout for this example.

Internal interfaces are connected to internal user networks only. External1 interfaces are connected to the network, joining Area and Area

External2 interfaces are connected to the network, joining Area and Area The ISP interface is called ISP.


Routers, areas, interfaces, IP addresses for advanced OSPF network


Router name           Area number and type            Interface                           IP address

Router1 (DR)   – stub area



port1 (internal)          


port2 (external1)       


Router2 (BDR) – backbone area

( R&D Network)


port1 (internal)          


port2 (external1)       


port3 (external2)       




Router3 (DR)   – backbone area

(R&D Network)


port1 (internal)          


port2 (external1)       


port3 (external2)       


Router4 (DR)   – regular area

(Network Admin)


port1 (internal)          


port2 (external2)       


port3 (ISP)                

Note that other subnets can be added to the internal interfaces without changing the configuration.

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Don't Forget To visit the YouTube Channel for the latest Fortinet Training Videos and Question / Answer sessions!
- FortinetGuru YouTube Channel
- FortiSwitch Training Videos