Duke,

I've done this very successfully for 3 years now.  Here's a sanatized
sample config.  Note that costing is extremely important, as you do NOT
want to wind up in a asnycronously routed position.  So, obviously costs
need to be thought out VERY far in advance, and you might want to play
with the routerdead and hello intervals, but here's one I'm using:

--------------/etc/gated.conf------------------
#
interfaces { interface all passive; };

autonomoussystem 100;

routerid 192.168.2.5;

rip no;

ospf yes {
#   backbone {
#      authtype none;
   area 100 {
   networks {
     192.168.0.0 mask 255.255.248.0 ;
     x.x.x.0 mask 255.255.254.0 ; 
   };
   interface hme0
      cost 3 {
        retransmitinterval 5;
        transitdelay 1;
        priority 8;
        hellointerval 1;
        routerdeadinterval 2;
      };
   interface qfe0
      cost 1 {
        retransmitinterval 5;
        transitdelay 1;
        priority 1;
        hellointerval 1;
        routerdeadinterval 2;
      };
   interface qfe1
      cost 7 {
        retransmitinterval 5;
        transitdelay 1;
        priority 1;
        hellointerval 1;
        routerdeadinterval 2;
      };
   interface qfe2
      cost 3 {
        retransmitinterval 5;
        transitdelay 1;
        priority 1;
        hellointerval 1;
        routerdeadinterval 2;
      };
   };
};
--------------/etc/gated.conf------------------

Hope this helps!

Jason



"Glover, Duke" wrote:
> 
> FW-1 3.0b VPN 3083
> Solaris 2.6
> 
> Is anyone using GateD for OSPF with FW-1 ?  I'm looking for success and/or
> un-success stories.  Also, if anyone would be willing to share a "sanitized"
> GateD configuration file to look at, it will be greatly appreciated.
> 
> AtDhVaAnNkCsE,
> 
> Duke Glover
> desk = 813-978-5682
> page = 888-510-6042
> [EMAIL PROTECTED]
> Verizon / Enterprise Information Protection Services
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to