OSPF Design

[mautez_mah]

Hi 
I have a project with one customer :
1- he has around 10 buildings ( and it will be extended )  
2- each building has a router 
3- all the sites will connect to ISP for DATA connection to other sites 
4- we agreed with him to configure OSPF , 
5- I have started a plan ( Router-ID -authentication _ naming - DR ) 
6- I have done a simple diagram in the attachment can anyone advise plz , if there any other point should I be careful about it 
7- Area 1 is Stub so can do _ if requested traffic engineering _ 
8- Main DC is connected to ISP thru two links, we can do traffic engineering based on cost or E1,E2 
any advice and recommendation plz

[balaji.bandi]

Can you do fine tune the diagram, where is your DC ? where is 10 sites connected? to get more clarity.

STUB means the end of the network, in your diagram R18 and R24 behind some Router connected?

Do you have any Firewall part of the OSPF process?

[mautez_mah]

Hi Balaji

Area 0 is DC , and it should connect  to ISP ,
Area 1 contains other sites ( I have added 7 will add 3 later )

Area 1 will be Stub area , 

will add FW instead of router later if they use the internet but for now no ,
is it a good design , what do you think about ABR , 

[balaji.bandi]

Looks like better information and you have different Areas now. when the area1 go stub,  in related to 18 and 24 connected devices. ( 18 and 24 will be stub ?)

Look at the OSPF area design :

https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-1.html

[mautez_mah]

yes , sure as you know all routers in the same Area should be Stub for adjacencies 

[mautez_mah]

can anyone update, waiting for anyone to give me some recommendation, the article is good but I need best practice 

[NormanSmith70793]

I have attached suggested design.

Assumptions - 10 Building - same Campus.

Connection to DC via ISP. 

[mautez_mah]

Thanks, NormanSmith70793

so as per yr design we can consider all routers in  the same Area ( DC + Building )

what do you think if we add two Areas ( one for DC ) and one for the other building ) 

[NormanSmith70793 · Accepted solution]

Attached an updated diagram to include Edge devices.

So basically, DC would be a LAN so any IGP is good, so OSPF would work.

I think the AREAS would be independent of each other. try keep it simple while practical.

[bluesea2010]

Hi @NormanSmith70793  and @mautez_mah 

for the  learning purpose 

can you explain the below points 

7- Area 1 is Stub so can do _ if requested traffic engineering _

8- Main DC is connected to ISP thru two links, we can do traffic engineering based on cost or E1,E2 

Thanks 

[mautez_mah]

Hi @bluesea2010 
Area 1 is Stub so can do _ if requested traffic engineering _
Stub Area is Area that will not allow LSA type 5-4 to flood into it, so now if I have  Two ABR one is  configured as Stub and another one is Toattly Stub so in this case, we can do traffic engineering by allowing only LSA type 3 on 
and change cost in another link

Main DC is connected to ISP thru two links, we can do traffic engineering based on cost or E1,E2 
here I meant that if  we have two External E2 and we change subnet for E1 so the OSpf will prefer E1 over E2 

as Ospf O IO E1 N1 E2 N2 
plz tell me if all clear or you need more explantion