Use Cases for SD-WAN Capabilities in Cisco Secure Firewall

PDF

Configure OSPF on the Hub Node

Updated: February 5, 2026

Want to summarize with AI?

Log in

Overview

Provides instructions for configuring OSPF on a Threat Defense (FTD) hub to route traffic across a route-based site-to-site VPN using Firewall Management Center (FMC).

OSPF is configured between Hub and Spoke device to allow traffic to be sent across the VPN tunnel. For reference, static routing is underlay, over which Spoke to Hub tunnel is established and OSPF is considered as overlay.

Procedure

1.

To edit the hub node, choose Devices > Device Management and click the Edit (edit icon) icon for the NGFW1 node.
2.

In the Interfaces tab, verify the Loopback1 interface that was created earlier and serves as the IP address for the DVTI interface.
3.

Click Routing.
4.

Click OSPF in the left panel.
5.

Check the Process 1 checkbox to enable an OSPF instance.
6.

Click the Interface tab.
7.

Click +Add. The Add Interface dialog box appears. Modify the following fields:

  • Interface—Select the DVTI interface outside_dynamic_vti_1 from the drop-down list.

  • Point-to-point—Check the checkbox to transmit OSPF routes over VPN tunnels.

    The rest of the fields use default values.

  • Click OK.

A row is added in the Interface tab for outside_dynamic_vti_1.
8.

Click the Area tab.
9.

Click +Add. The Add Area dialog box appears. Modify the following fields:

  • OSPF Process—Choose the process ID as 1.

  • Area ID—Ensure the value is 1.

    The rest of the fields use default values.

  • Available Network— To add networks to be advertised over the tunnel:

    • To add a new network object, click . Enter these details:

      • Name—Enter the name as HUB_Tunnel_IP.

      • Network—Select the Host option and enter the host IP as 198.48.133.81

        .

      • Click Save.

    • Enter HUB in the search area of the Available Network field. The newly added network object ( HUB_Tunnel_IP) is listed. Select the object and click Add to add it to the Selected Network list.

    • Enter Corporate in the search area of the Available Network field. The Corporate_LAN network object is listed. Select the object and click Add to add it to the Selected Network list.

  • Click OK.

A row is added in the Area tab.

Screenshot of OSPF routing for a hub in Firewall Management Center
10.

Click Save to save the OSPF configuration for the hub node.