OSPF: Area Design and Best Practices

OSPF (Open Shortest Path First) is the most widely deployed IGP in enterprise and ISP networks. It is a link-state protocol offering rapid convergence and scalability through an area-based hierarchy. This guide covers enterprise OSPF design: areas, LSAs, route summarization, stub/totally stubby areas, authentication, and BFD. 2026.

How OSPF Works

• Link state: each router advertises the state of its links through LSAs
• The LSDB is synchronized across all routers in an area
• SPF (Dijkstra) calculates the shortest path
• Convergence: <1s with BFD, ~3-5s without it
• Hello interval: 10s (LAN), 30s (WAN)
• Dead interval: 40s (LAN), 120s (WAN)

Areas

• Area 0 (backbone): mandatory; all non-0 areas must connect to it
• Regular area: LSA 1/2/3/4/5 are permitted
• Stub area: no LSA 5 (no external routes); they are replaced by a default route
• Totally stubby area: stub area with no LSA 3/4 (no inter-area routes), only a default route
• NSSA: a stub area that permits locally originated external routes through LSA 7
• Totally NSSA: NSSA with no LSA 3/4

LSA Types

• Type 1 (Router LSA): a router's intra-area links
• Type 2 (Network LSA): multi-access networks, generated by the DR
• Type 3 (Summary LSA): inter-area summary generated by an ABR
• Type 4 (ASBR Summary): identifies the ASBR location
• Type 5 (External): redistributed routes (BGP, static)
• Type 7 (NSSA): external route within an NSSA, translated into Type 5 by an ABR

Router Roles

• Internal Router (IR): belongs to a single area
• ABR (Area Border Router): connects 2 or more areas, including area 0
• ASBR (AS Boundary Router): redistributes external routes
• Backbone router: has at least 1 interface in area 0

Hierarchical Design

Small (<50 routers)

Single area 0. Simple and quick to deploy.

Medium (50-200)

Area 0 backbone + 3-5 regular or stub areas. ABRs connect the areas.

Large (200+)

Area 0 + stub/totally stubby areas for branch offices + NSSAs for sites that perform redistribution. Route summarization between areas is mandatory.

Route Summarization

• Inter-area: area X range 10.1.0.0 255.255.0.0 (on the ABR)
• External: summary-address 172.16.0.0 255.240.0.0 (on the ASBR)
• Reduces LSDB size and SPF computation
• Critical for scaling beyond 50 routers

Cisco IOS Configuration

• router ospf 1
• router-id 10.0.0.1
• area 0 authentication message-digest
• network 10.0.0.0 0.255.255.255 area 0
• network 192.168.1.0 0.0.0.255 area 10
• area 10 stub no-summary: totally stubby
• area 10 range 192.168.0.0 255.255.0.0: summary
• interface Gi0/0 ; ip ospf message-digest-key 1 md5 MyOSPFPass

BFD for Rapid Convergence

• interface Gi0/0 ; bfd interval 250 min_rx 250 multiplier 3 ; ip ospf bfd
• Convergence: <750ms vs 40s by default
• Recommended for WAN and critical links

Authentication

• Plaintext (avoid): ip ospf authentication ; ip ospf authentication-key MyPass
• MD5 (standard): ip ospf authentication message-digest
• SHA-256 (recommended, IOS-XE): key chain OSPF-KC ; key 1 ; key-string MyPass ; cryptographic-algorithm hmac-sha-256

Best Practices

• Use a stable Router-ID (loopback) — never assign it automatically
• Use MD5 authentication at a minimum
• Use point-to-point networks on WAN links to avoid DR election
• Use passive-interface default + no passive on active OSPF links
• Keep timers (hello/dead) consistent across all routers
• Use BFD for convergence in <1s
• Systematically summarize routes between areas

Troubleshooting

• show ip ospf neighbor: sessions
• show ip ospf database: LSDB
• show ip ospf interface: interface status
• show ip route ospf: learned routes
• debug ip ospf hello: hello packets (use caution in production)
• debug ip ospf adj: adjacency formation

Order from OPTINOC

Turnkey multi-area OSPF design for Cisco/Juniper/FortiGate. Advanced OSPF training for technical teams. Quote for an IGP routing architecture within 48h.