Static to OSPF Migration

[Mokhalil82]

Hi           **Re-posted... previous posts duplicated, Thanks Jon for pointing that out**

I am in the process of looking into implementing OSFP on a network currently using static routes. The network has 2 DCs each with a core switch, connected to a pair of ASA firewalls, then going into the DMZ switches and they external facing Juniper firewalls.

I have not got much OSPF experience so wondering how people would approach this.

I was thinking of configuring ospf on the core switches specifying all interfaces on each and same on the DMZ switches. OSPF AD is 110 so I am expecting to see the routes in the routing tables but not as preferred routes as the static will still be in place, then I am thinking of removing the statics once i feel somewhat confident that all necessary routes are in the ospf process.

Also not to forget to redistribute the static routes facing external networks. Is it worth hardcoding the router IDs. I'm sticking to a single area for now as it is not a huge network

Anyone had any recent experiences they may want to share, or advise if i am on the right lines?

Thanks

[Jon Marshall]

I did post an answer in one of those threads but just to repeat it here.

Your approach is sound ie. configure OSPF and make sure all devices have the correct routes. 

Because you are using statics your OSPF routes won't take effect until you want so when you are happy that all routes are in place you can then delete the statics.

In terms of the router ID I would recommend you specifically set the router ID because it can make reading and interpreting the OSPF database a lot easier.

Some people like to be able to telnet to the router ID IP address so you can configure a loopback address with the IP you want to use and OSPF will choose the highest loopback IP before it considers any of the physical interface IPs.

You would obviously then need to advertise the IP under OSPF.

If you use the OSPF router ID command then that won't be advertised. It doesn't need to be because the router ID does not need to be reachable but then obviously you couldn't then telnet to that IP.

So it's up to you really as to which option you choose.

Jon