Multi-Area OSPF: Design and Configuration for Enterprise Networks

Multi-area OSPF design for large enterprises: hierarchical areas, stub/totally stubby/NSSA areas, route summarization, MD5/SHA authentication, and BFD. Practical enterprise examples for 500-5000 routers. 2026 expert guide.

Multi-Area Rules

• Area 0 (backbone) is mandatory
• Non-backbone areas must connect to area 0 through an ABR
• Virtual links: an exception for indirect connectivity that should be avoided
• Recommended: <50 routers per area

Area Types

Regular area

All LSAs are allowed. All routes, both internal and external, are received.

Stub area

• No Type 5 LSAs (external routes)
• Default route injected by the ABR
• Configuration: area X stub

Totally stubby area

• Stub area with no Type 3/4 LSAs
• Default route only
• Maximum scalability
• Cisco configuration: area X stub no-summary

NSSA

• Stub area that allows Type 7 LSAs for locally redistributed external routes
• Used when redistribution is required in a non-backbone area
• Type 7 LSAs are translated into Type 5 LSAs by the ABR

Route Summarization

• Inter-area (on the ABR): area 10 range 10.1.0.0/16
• External (on the ASBR): summary-address 172.16.0.0/12
• Reduces LSDB size and accelerates SPF calculations
• CRITICAL for deployments with >100 routers

Authentication

• Type 0: none (unsecured; do not use)
• Type 1: plain text (unsecured)
• Type 2: MD5 (acceptable)
• Type 3: HMAC-SHA-1 through HMAC-SHA-384 (RFC 5709, modern)

BFD

• Convergence in <1s instead of the default 40s
• interface gi0/0 ; bfd interval 250 min_rx 250 multiplier 3
• router ospf 1 ; bfd all-interfaces
• Recommended for critical WAN links

Reference Design for 2000 Routers

• Area 0 backbone: 50 core routers
• 20 regular areas with 100 routers each
• 2 ABRs per area for redundancy
• Strict summarization between areas
• BFD on all links
• SHA-256 authentication

Order from OPTINOC

Enterprise and ISP multi-area OSPF design. Cisco, Juniper, and FortiGate. Advanced OSPF training. Quote within 48 hours.