CCNA OSPF Lab — Single-Area OSPF Configuration & Verification

What a CCNA OSPF Lab Is and Why Single-Area Configuration Matters in 2026

A CCNA OSPF lab is a hands-on topology where you configure Open Shortest Path First (OSPF) on Cisco routers to enable dynamic routing within a single autonomous system. Single-area OSPF—typically Area 0 (the backbone area)—is the foundation every network engineer must master before tackling multi-area designs, redistribution, or advanced path manipulation. In 2026, OSPF remains the dominant IGP in Indian enterprise campuses and data centers operated by Cisco India, HCL, Aryaka, and Akamai India, making lab proficiency non-negotiable for CCNA 200-301 candidates and junior NOC engineers.

Unlike static routing, OSPF automatically discovers neighbors, exchanges link-state advertisements (LSAs), builds a topology database using Dijkstra's algorithm, and converges in seconds when links fail. Single-area OSPF simplifies this process by eliminating inter-area summarization and area border router (ABR) complexity, letting you focus on neighbor adjacency, router ID selection, network statements, and verification commands. Employers in Bengaluru's HSR Layout corridor—where Networkers Home operates India's largest physical training lab—expect fresh hires to configure OSPF from scratch, interpret show ip ospf neighbor output, and troubleshoot stuck adjacencies within minutes.

This chapter walks you through a complete single-area OSPF lab: topology design, router ID assignment, network advertisement, passive interfaces, cost tuning, and verification. You will also learn the CLI commands Cisco interviewers test during technical rounds and the real-world deployment patterns our 4-month paid internship participants encounter at Network Security Operations Division partners like Barracuda and Movate. By the end, you will confidently configure OSPF Area 0 on three routers, verify full adjacency, and explain why OSPF scales better than RIP or EIGRP in modern IP networks.

How OSPF Builds and Maintains the Link-State Database

OSPF operates by flooding link-state advertisements across all routers in an area, ensuring every router holds an identical topology map. When you enable OSPF on an interface using the network command, the router sends Hello packets (default interval 10 seconds on broadcast/point-to-point, 30 seconds on NBMA) to multicast address 224.0.0.5. If a neighbor responds with matching Hello parameters—area ID, authentication, stub flags, and timers—the routers progress through the adjacency states: Down → Init → 2-Way → ExStart → Exchange → Loading → Full.

During the Exchange state, routers elect a designated router (DR) and backup designated router (BDR) on multi-access segments like Ethernet to reduce LSA flooding overhead. Only the DR and BDR form Full adjacencies with all other routers; non-DR routers remain in 2-Way with each other. The DR listens on 224.0.0.6 and redistributes LSAs to all OSPF routers on the segment. In our HSR Layout lab, we tested DR election on a four-router Ethernet segment: the router with the highest OSPF priority (default 1) wins; ties break by highest router ID. Setting priority to 0 on an interface prevents that router from ever becoming DR or BDR, a technique used in hub-and-spoke WAN designs.

Once adjacencies reach Full, each router runs the Shortest Path First (SPF) algorithm—Dijkstra's algorithm—against its link-state database (LSDB) to compute the best path to every destination. OSPF assigns a cost to each interface based on reference bandwidth divided by interface bandwidth: cost = 100,000,000 / bandwidth_bps. A FastEthernet interface (100 Mbps) has cost 1; a T1 (1.544 Mbps) has cost 64. You can override auto-calculated costs with ip ospf cost under the interface or globally adjust the reference bandwidth with auto-cost reference-bandwidth in OSPF configuration mode. Cisco India data centers often set reference bandwidth to 100000 (100 Gbps) to differentiate 10GE and 40GE uplinks.

OSPF reconverges when it detects a topology change—either a link failure (detected by loss of Hello packets after the dead interval, default 40 seconds) or a new LSA. The router that detects the change floods a new LSA, all routers update their LSDB, and each re-runs SPF. Incremental SPF (iSPF) and partial SPF optimizations in IOS 15.x and later reduce CPU load by recalculating only affected branches of the SPF tree. This sub-second convergence is why OSPF dominates Indian enterprise campuses over distance-vector protocols like RIP, which converge in minutes and suffer from count-to-infinity loops.

OSPF Packet Types and Their Roles

• Type 1 (Hello): Discovers neighbors, elects DR/BDR, maintains adjacencies. Sent every 10 seconds on broadcast/point-to-point.
• Type 2 (Database Description, DBD): Summarizes the LSDB during the Exchange state. Contains LSA headers only, not full LSA content.
• Type 3 (Link-State Request, LSR): Requests full LSA details for entries missing or outdated in the local LSDB.
• Type 4 (Link-State Update, LSU): Carries one or more full LSAs. This is the packet that floods topology changes across the area.
• Type 5 (Link-State Acknowledgment, LSAck): Confirms receipt of LSUs, ensuring reliable flooding.

Understanding these packet types is critical when troubleshooting stuck adjacencies. If routers exchange Hellos but never reach Full, check for mismatched MTU (DBD packets will fail), mismatched area ID, or authentication key mismatch. Wireshark captures on the lab segment reveal whether DBD packets are being sent and acknowledged, a technique our CCIE-track students use during the best CCNA course in Bangalore troubleshooting modules.

Single-Area OSPF Lab Topology and IP Addressing Scheme

The canonical CCNA OSPF lab uses three routers in a triangle topology, each connected via serial or Gigabit Ethernet point-to-point links. We will label them R1, R2, and R3. Each router also has a loopback interface representing a LAN segment. All interfaces belong to OSPF Area 0, the backbone area. This design mirrors the branch-office WAN topologies deployed by Aryaka and Cisco SD-WAN customers across India, where each branch router runs OSPF to advertise local subnets to the regional hub.

Using /30 subnets on point-to-point links conserves address space and simplifies OSPF network statements. Loopback interfaces with /32 masks are best practice for router IDs and management reachability because they never go down unless you administratively shut them. In production, Indian ISPs and enterprises assign loopbacks from a dedicated /24 or /16 block, ensuring consistent router IDs across reboots and interface flaps.

Before configuring OSPF, verify IP connectivity with ping between directly connected interfaces. If R1 cannot ping 10.1.12.2, check interface status with show ip interface brief, confirm no shutdown, and verify cabling. In our 24×7 rack access lab at HSR Layout, students often discover that GigabitEthernet interfaces default to shutdown on older IOS images, a gotcha that wastes 15 minutes during timed CCNA practicals.

Step-by-Step OSPF Configuration on Cisco IOS

Configuring single-area OSPF involves four tasks: enabling the OSPF process, assigning a router ID, advertising networks into OSPF, and optionally tuning timers and costs. We will configure R1 first, then replicate the pattern on R2 and R3. All commands are entered in global configuration mode unless otherwise noted.

Step 1: Enable the OSPF Process

R1(config)# router ospf 1

The number 1 is the process ID, locally significant to this router. It does not need to match across routers, though using the same process ID (1 or 100) organization-wide simplifies documentation. You can run multiple OSPF processes on one router (e.g., process 1 for Area 0, process 2 for a separate routing domain), but single-area labs use one process.

Step 2: Assign a Router ID

R1(config-router)# router-id 1.1.1.1

The router ID is a 32-bit identifier written in dotted-decimal notation. OSPF uses it to uniquely identify each router in the area and to elect DR/BDR. If you omit the router-id command, IOS selects the highest IP address among all active loopback interfaces; if no loopbacks exist, it picks the highest IP on any active physical interface. Explicitly setting the router ID prevents surprises when interfaces flap. After changing the router ID, you must clear the OSPF process with clear ip ospf process or reload the router for the new ID to take effect.

Step 3: Advertise Networks into OSPF

R1(config-router)# network 1.1.1.1 0.0.0.0 area 0
R1(config-router)# network 10.1.12.0 0.0.0.3 area 0
R1(config-router)# network 10.1.13.0 0.0.0.3 area 0

The network command matches interfaces whose IP addresses fall within the specified address and wildcard mask, then enables OSPF on those interfaces and advertises their subnets. The wildcard mask is the inverse of the subnet mask: for a /30 (255.255.255.252), the wildcard is 0.0.0.3. A wildcard of 0.0.0.0 matches one exact IP address, useful for loopbacks. All matched interfaces are placed into the specified area—here, Area 0.

You can also use a broad wildcard to enable OSPF on all interfaces: network 0.0.0.0 255.255.255.255 area 0. This shortcut is common in lab environments but discouraged in production because it inadvertently enables OSPF on management interfaces or future interfaces you add later. Cisco India NOC teams prefer explicit per-subnet network statements for audit and change-control compliance.

Step 4: Configure Passive Interfaces (Optional but Recommended)

R1(config-router)# passive-interface Loopback0

A passive interface is advertised into OSPF (its subnet appears in the routing table of other routers) but does not send or receive OSPF packets. Loopbacks and LAN-facing interfaces that will never have OSPF neighbors should be passive to reduce unnecessary Hello traffic and prevent unauthorized routers from forming adjacencies. You can also set all interfaces passive by default and selectively enable OSPF on WAN links:

R1(config-router)# passive-interface default
R1(config-router)# no passive-interface GigabitEthernet0/0
R1(config-router)# no passive-interface GigabitEthernet0/1

This approach is standard in Akamai India edge deployments, where only uplink interfaces participate in OSPF and customer-facing ports remain passive to isolate the control plane.

Step 5: Repeat on R2 and R3

Apply the same configuration pattern on R2 and R3, substituting their respective router IDs and network statements:

R2(config)# router ospf 1
R2(config-router)# router-id 2.2.2.2
R2(config-router)# network 2.2.2.2 0.0.0.0 area 0
R2(config-router)# network 10.1.12.0 0.0.0.3 area 0
R2(config-router)# network 10.1.23.0 0.0.0.3 area 0
R2(config-router)# passive-interface Loopback0

R3(config)# router ospf 1
R3(config-router)# router-id 3.3.3.3
R3(config-router)# network 3.3.3.3 0.0.0.0 area 0
R3(config-router)# network 10.1.13.0 0.0.0.3 area 0
R3(config-router)# network 10.1.23.0 0.0.0.3 area 0
R3(config-router)# passive-interface Loopback0

Within seconds of enabling OSPF on the second router, you will see console messages indicating neighbor adjacency formation: %OSPF-5-ADJCHG: Process 1, Nbr 2.2.2.2 on GigabitEthernet0/0 from LOADING to FULL, Loading Done. This confirms the routers exchanged DBD packets, synchronized their LSDBs, and completed SPF calculation.

Verification Commands Every CCNA Candidate Must Master

Cisco interviewers at HCL, Wipro, and TCS expect you to interpret OSPF verification output without hesitation. The five commands below form the core of any OSPF troubleshooting workflow and appear in every CCNA 200-301 lab scenario.

show ip ospf neighbor

R1# show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.2           1   FULL/  -        00:00:35    10.1.12.2       GigabitEthernet0/0
3.3.3.3           1   FULL/  -        00:00:38    10.1.13.2       GigabitEthernet0/1

This output confirms R1 has two OSPF neighbors in the Full state, meaning adjacencies are established and LSDBs are synchronized. The Pri column shows OSPF priority (used for DR/BDR election); the dash after FULL/ indicates point-to-point links where no DR election occurs. On multi-access segments, you would see FULL/DR, FULL/BDR, or FULL/DROTHER. The Dead Time counts down from 40 seconds (default dead interval); if it reaches zero without receiving a Hello, the neighbor is declared down and the adjacency tears down.

If a neighbor is stuck in Init or 2-Way, check for mismatched area IDs, MTU mismatches (use show interface to verify MTU is 1500 on both ends), or access-list blocking OSPF multicast. In our HSR Layout lab, we simulate MTU mismatches by setting one interface to 1400 bytes; students learn to spot the DBD exchange failure in debug ip ospf adj output.

show ip ospf interface brief

R1# show ip ospf interface brief

Interface    PID   Area            IP Address/Mask    Cost  State Nbrs F/C
Lo0          1     0               1.1.1.1/32         1     LOOP  0/0
Gi0/0        1     0               10.1.12.1/30       1     P2P   1/1
Gi0/1        1     0               10.1.13.1/30       1     P2P   1/1

This command lists all OSPF-enabled interfaces, their area assignment, cost, state (LOOP for loopback, P2P for point-to-point, DR/BDR/DROTHER for multi-access), and neighbor counts. The Nbrs F/C column shows Full neighbors versus total neighbors; 1/1 means one neighbor and it is Full. If you see 0/1, the neighbor exists but is not Full—investigate with show ip ospf neighbor and debug ip ospf adj.

show ip route ospf

R1# show ip route ospf

      2.0.0.0/32 is subnetted, 1 subnets
O        2.2.2.2 [110/2] via 10.1.12.2, 00:05:23, GigabitEthernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/2] via 10.1.13.2, 00:05:18, GigabitEthernet0/1
O     10.1.23.0/30 [110/2] via 10.1.12.2, 00:05:23, GigabitEthernet0/0
                   [110/2] via 10.1.13.2, 00:05:18, GigabitEthernet0/1

Routes learned via OSPF are marked with O. The administrative distance is 110 (lower than RIP's 120, higher than EIGRP's 90). The metric in brackets is the cumulative OSPF cost from this router to the destination. R1 learns 2.2.2.2/32 with cost 2 (cost 1 on Gi0/0 plus cost 1 on R2's loopback). The 10.1.23.0/30 subnet has two equal-cost paths, so OSPF installs both for load balancing—a feature called Equal-Cost Multi-Path (ECMP). By default, Cisco IOS load-balances across up to four equal-cost paths; you can increase this to 16 with maximum-paths under the OSPF process.

show ip ospf database

R1# show ip ospf database

            OSPF Router with ID (1.1.1.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         312         0x80000003 0x00A3F2 4
2.2.2.2         2.2.2.2         308         0x80000003 0x009BF8 4
3.3.3.3         3.3.3.3         305         0x80000004 0x0093FE 4

The LSDB contains one Type-1 Router LSA from each router in Area 0. Each LSA lists the router's directly connected links, their costs, and neighbor relationships. The Age column shows seconds since the LSA was generated; LSAs refresh every 30 minutes (1800 seconds) and age out after 60 minutes if not refreshed. The Seq# is a sequence number that increments with each LSA update, allowing routers to identify the most recent version. Mismatched LSDBs indicate a partition or filtering issue; use show ip ospf database router to drill into individual LSAs.

show ip protocols

R1# show ip protocols

Routing Protocol is "ospf 1"
  Outgoing update filter list for all interfaces is not set
  Incoming update filter list for all interfaces is not set
  Router ID 1.1.1.1
  Number of areas in this router is 1. 1 normal 0 stub 0 nssa
  Maximum path: 4
  Routing for Networks:
    1.1.1.1 0.0.0.0 area 0
    10.1.12.0 0.0.0.3 area 0
    10.1.13.0 0.0.0.3 area 0
  Passive Interface(s):
    Loopback0
  Routing Information Sources:
    Gateway         Distance      Last Update
    2.2.2.2              110      00:06:45
    3.3.3.3              110      00:06:40
  Distance: (default is 110)

This command summarizes the OSPF configuration: process ID, router ID, advertised networks, passive interfaces, and administrative distance. It is invaluable during troubleshooting because it shows exactly which networks you configured and which interfaces are passive. If a subnet is missing from the routing table, check show ip protocols to confirm you included the correct network statement.

Common OSPF Pitfalls and CCIE Interview Gotchas

During technical interviews at Cisco India and Barracuda, candidates are handed a broken OSPF topology and asked to restore full adjacency within 10 minutes. The following pitfalls account for 80% of lab failures among CCNA students in our best CCNA course in Bangalore batches.

Mismatched Area IDs

OSPF routers form adjacencies only if their Hello packets carry the same area ID. If R1 advertises 10.1.12.0/30 into Area 0 but R2 advertises 10.1.12.0/30 into Area 1, they will exchange Hellos but never progress past Init. The fix: verify area assignments with show ip ospf interface and correct the network statement. In multi-area designs, this is intentional—ABRs sit on the boundary between areas—but in single-area labs, all interfaces must be in Area 0.

MTU Mismatch

OSPF DBD packets carry the interface MTU in the packet header. If R1's MTU is 1500 and R2's is 1400, they will exchange Hellos and reach ExStart, but the DBD exchange fails because R2 rejects R1's 1500-byte packets. The adjacency oscillates between ExStart and Exchange. Cisco IOS logs %OSPF-4-ERRRCV: Received invalid packet: mismatch MTU. The fix: set MTU to 1500 on both ends with ip mtu 1500 under the interface, or use ip ospf mtu-ignore to disable MTU checking (not recommended in production).

Duplicate Router IDs

If two routers share the same router ID, OSPF behavior is undefined. Typically, one router ignores LSAs from the other, resulting in incomplete routing tables and black holes. Always assign unique router IDs, preferably from a dedicated loopback range. In our internship placements at Movate and Wipro NOCs, duplicate router IDs are the #1 cause of escalated OSPF tickets because junior engineers copy-paste configurations without updating the router-id statement.

Passive Interface on WAN Links

If you accidentally configure passive-interface GigabitEthernet0/0 on R1, that interface stops sending Hellos and no neighbor adjacency forms with R2. The interface still advertises its subnet into OSPF, so R2 learns 10.1.12.0/30, but R1 does not learn R2's routes. The symptom: show ip ospf neighbor on R1 is empty for that interface. The fix: remove the passive-interface statement or use no passive-interface GigabitEthernet0/0.

Incorrect Wildcard Mask in Network Statement

A common mistake is using a subnet mask instead of a wildcard mask: network 10.1.12.0 255.255.255.252 area 0. IOS accepts this syntax but interprets 255.255.255.252 as a wildcard, matching a huge range of addresses. The correct wildcard for /30 is 0.0.0.3. To avoid confusion, memorize: wildcard = 255.255.255.255 minus subnet mask. For /24 (255.255.255.0), wildcard is 0.0.0.255. For /30 (255.255.255.252), wildcard is 0.0.0.3.

Forgetting to Clear the OSPF Process After Changing Router ID

If you change the router ID with router-id, the new ID does not take effect until you reload the router or issue clear ip ospf process. Many students change the router ID, verify with show ip protocols, see the old ID, and waste time troubleshooting phantom issues. Always clear the process after modifying the router ID, and confirm the change with show ip ospf.

Real-World OSPF Deployment Scenarios in Indian Enterprises

Single-area OSPF is the workhorse IGP in Indian branch networks, campus LANs, and small data centers. Understanding how Cisco India customers deploy OSPF helps you design labs that mirror production and prepares you for the scenarios you will encounter during your 4-month paid internship at Network Security Operations Division partners.

Branch Office WAN with MPLS or SD-WAN Underlay

A typical Indian retail chain operates 200 branches, each with a Cisco ISR 4000 router connected to an MPLS provider or SD-WAN fabric. Each branch router runs OSPF Area 0 to advertise local LAN subnets (POS systems, Wi-Fi, IP cameras) to the regional hub. The hub router, often a Cisco ASR 1000, redistributes OSPF routes into BGP for inter-region reachability or into another OSPF process for the data center. Aryaka and Cisco SD-WAN customers use this exact design, with OSPF handling intra-site routing and BGP or OMP handling inter-site routing.

In this scenario, branch routers have two or three OSPF neighbors: the primary hub, a backup hub, and possibly a direct peer link to an adjacent branch. Passive interfaces are configured on all LAN-facing VLANs to prevent rogue routers from injecting routes. OSPF authentication (MD5 or SHA) is enabled on WAN links to prevent man-in-the-middle attacks, a requirement under RBI cybersecurity guidelines for payment networks.

Campus LAN with Layer 3 Distribution Switches

A Bengaluru IT park with 10 buildings uses Cisco Catalyst 9300 or 9400 switches in a routed access design. Each access switch is a Layer 3 device running OSPF to advertise its local VLANs to the distribution layer. The distribution switches aggregate routes and connect to the core via 40GE or 100GE uplinks. All switches run OSPF Area 0 because the campus is a single administrative domain. Loopback interfaces on each switch serve as router IDs and management endpoints, reachable even if physical uplinks fail.

Cisco India recommends setting OSPF reference bandwidth to 100000 (100 Gbps) in these environments so that 10GE links have cost 10 and 100GE links have cost 1, ensuring traffic prefers the fastest path. Without adjusting reference bandwidth, both 10GE and 1GE links default to cost 1, causing suboptimal routing. We tested this in our HSR Layout lab by building a three-tier topology with GigabitEthernet and TenGigabitEthernet links; students learn to tune costs and verify path selection with show ip route and traceroute.

Data Center Leaf-Spine with OSPF Underlay

Modern data centers use a leaf-spine architecture where every leaf switch connects to every spine switch in a full mesh. OSPF runs on the underlay (physical links) to provide IP reachability, while BGP EVPN or VXLAN runs on the overlay for tenant isolation. Each leaf and spine is an OSPF router in Area 0, with point-to-point links between them. Because the topology is non-blocking and symmetric, all paths have equal cost, and OSPF installs all of them for ECMP load balancing.

Akamai India edge nodes use a similar design, with OSPF providing underlay reachability for CDN caches and BGP advertising customer prefixes. During our internship program, students configure OSPF on Nexus 9000 switches in NX-OS, learning the syntax differences from IOS (e.g., feature ospf must be enabled globally, and ip router ospf is configured per interface rather than with network statements).

How OSPF Fits into the CCNA 200-301 Exam Blueprint

OSPF is a core topic in the CCNA 200-301 exam, appearing in Domain 3.0 (IP Connectivity) under objectives 3.2 (Determine how a router makes a forwarding decision) and 3.4 (Configure and verify single-area OSPFv2). Cisco allocates approximately 25% of exam questions to IP routing, and OSPF accounts for roughly one-third of those questions—expect 6-8 OSPF questions per exam attempt.

Exam questions test your ability to interpret show command output, identify misconfigurations, and predict routing behavior. You might see a topology diagram with OSPF configurations on three routers and be asked: "Which router will become the DR on the 10.1.12.0/30 segment?" (Trick question: point-to-point links do not elect a DR.) Or: "R1 cannot ping 3.3.3.3. Based on the output of show ip ospf neighbor, what is the most likely cause?" (Answer: no neighbor adjacency with R3, check area ID and passive interface settings.)

The CCNA lab simulator includes OSPF configuration and troubleshooting scenarios. You must configure OSPF from scratch, verify adjacencies, and correct broken topologies within the time limit. Practicing on real Cisco hardware or GNS3/EVE-NG with IOS images is essential. Our CCNA study guide includes 12 OSPF labs ranging from basic single-area to advanced redistribution and summarization, all validated against the 200-301 blueprint.

Beyond CCNA, OSPF mastery is a prerequisite for CCNP Enterprise (ENCOR 350-401 and ENARSI 300-410), where you configure multi-area OSPF, stub areas, virtual links, and OSPF authentication. CCIE Enterprise Infrastructure candidates must troubleshoot complex OSPF scenarios involving route filtering, LSA types, and inter-area summarization under time pressure. Vikas Swami, founder of Networkers Home and Dual CCIE #22239, architected QuickSDWAN with OSPF as the underlay protocol, demonstrating OSPF's relevance in modern SD-WAN and cloud networking.

Advanced OSPF Tuning for Lab and Production Environments

Once you master basic OSPF configuration, the following tuning techniques differentiate junior engineers from senior network architects. These are tested in CCNP and CCIE labs and deployed in production by Cisco India enterprise customers.

Adjusting OSPF Timers for Faster Convergence

Default OSPF timers (Hello 10s, Dead 40s) provide stable adjacencies but slow convergence. In latency-sensitive environments like stock exchanges or payment gateways, you can reduce timers to Hello 1s, Dead 4s for sub-second failure detection:

R1(config-if)# ip ospf hello-interval 1
R1(config-if)# ip ospf dead-interval 4

Both routers on the link must use the same timers, or adjacencies will flap. Aggressive timers increase CPU load because routers process Hellos every second, so use them only on critical links. Cisco recommends BFD (Bidirectional Forwarding Detection) for sub-second failure detection without the CPU overhead of fast OSPF timers. BFD runs independently of OSPF and signals OSPF to tear down the adjacency when it detects a link failure, achieving convergence in 50-300 milliseconds.

Manipulating OSPF Cost to Influence Path Selection

By default, OSPF prefers the path with the lowest cumulative cost. If you have a primary 10GE link and a backup 1GE link between two sites, both will have cost 1 unless you adjust the reference bandwidth. To force traffic over the 10GE link, manually set the 1GE link cost to 100:

R1(config-if)# interface GigabitEthernet0/1
R1(config-if)# ip ospf cost 100

Now the 10GE path (cost 1) is preferred, and the 1GE path is used only if the 10GE link fails. This technique is common in Indian MPLS networks where primary and backup circuits have different bandwidths. Alternatively, adjust the interface bandwidth with bandwidth 10000000 (in kbps) to influence auto-calculated cost, but this also affects QoS and other features that read the bandwidth value.

Summarizing Routes at ABRs (Multi-Area Preview)

Although single-area OSPF does not require summarization, understanding the concept prepares you for multi-area designs. An Area Border Router (ABR) can summarize routes from one area before advertising them into another, reducing LSDB size and SPF computation time. For example, if Area 1 contains subnets 192.168.1.0/24 through 192.168.15.0/24, the ABR can advertise a single 192.168.0.0/20 summary into Area 0:

R1(config-router)# area 1 range 192.168.0.0 255.255.240.0

Summarization is a CCNP topic but appears in CCIE troubleshooting scenarios where over-summarization causes black holes or routing loops. Networkers Home CCNP batches spend two weeks on multi-area OSPF, including stub areas, totally stubby areas, and NSSA, all tested in our 24×7 rack access lab.

Frequently Asked Questions About CCNA OSPF Labs

What is the difference between OSPF Area 0 and other areas?

Area 0 is the backbone area in OSPF. All inter-area traffic must pass through Area 0, making it the hub of the OSPF domain. Non-zero areas (Area 1, Area 2, etc.) connect to Area 0 via Area Border Routers (ABRs). In single-area OSPF labs, you use only Area 0 because there are no ABRs or inter-area routes. Multi-area OSPF reduces LSDB size and SPF computation by confining topology changes to a single area, but it adds complexity. CCNA focuses on single-area; CCNP covers multi-area.

Why does OSPF use cost instead of hop count?

Cost is a bandwidth-aware metric that reflects link speed, whereas hop count treats all links equally. A 10-hop path over 10GE links is faster than a 2-hop path over T1 links, but hop count would prefer the slower path. OSPF cost = reference bandwidth / interface bandwidth, so faster links have lower cost and are preferred. This makes OSPF suitable for modern networks with mixed link speeds (1GE, 10GE, 40GE, 100GE). RIP uses hop count and is obsolete in production for this reason.

Can I run OSPF and EIGRP on the same router?

Yes, you can run multiple routing protocols simultaneously and redistribute routes between them. For example, R1 might run OSPF toward the campus and EIGRP toward a legacy WAN. You configure redistribution under each routing process: redistribute eigrp 100 subnets under OSPF, and redistribute ospf 1 metric 10000 100 255 1 1500 under EIGRP. Redistribution is a CCNP topic and a common source of routing loops if not carefully controlled with route maps and administrative distance tuning. In production, most Indian enterprises standardize on one IGP (usually OSPF) to avoid redistribution complexity.

What happens if I configure the wrong area ID on one interface?

If R1's Gi0/0 is in Area 0 and R2's Gi0/0 is in Area 1, they will not form an adjacency. OSPF Hellos carry the area ID, and routers reject Hellos from different areas. The symptom: show ip ospf neighbor shows no neighbor on that interface, and debug ip ospf adj logs "area mismatch" errors. The fix: correct the network statement to place both interfaces in the same area. In multi-area designs, this is intentional—ABRs have interfaces in multiple areas—but in single-area labs, all interfaces must be in Area 0.

How do I verify that OSPF is load-balancing across multiple paths?

Use show ip route ospf to confirm multiple next-hops for the same destination. For example, if R1 has two equal-cost paths to 3.3.3.3, the output shows two lines with the same metric but different next-hop addresses. Use traceroute 3.3.3.3 multiple times; if load balancing is per-packet (default on older IOS), you will see different paths. If load balancing is per-destination (CEF default on modern IOS), the same source-destination pair always uses the same path, but different destinations spread across paths. Verify CEF load balancing with show ip cef 3.3.3.3, which lists all next-hops and their load-share weights.

Why is my OSPF adjacency stuck in ExStart?

ExStart is the state where routers negotiate who will be the master (higher router ID) and who will be the slave during DBD exchange. If adjacency is stuck in ExStart, the most common causes are MTU mismatch (one router's DBD packets exceed the other's MTU) or access-list blocking OSPF packets. Check MTU with show interface and ensure both ends are 1500. Use debug ip ospf adj to see DBD packet exchanges. If you see "mismatch MTU" errors, either fix the MTU or use ip ospf mtu-ignore as a workaround (not recommended in production).

Do I need to configure OSPF authentication for the CCNA exam?

OSPF authentication is not explicitly required by the CCNA 200-301 blueprint, but it appears in some lab scenarios and is good practice. Authentication prevents rogue routers from injecting routes. The simplest form is plaintext authentication: ip ospf authentication-key MyPassword and ip ospf authentication under the interface. Both routers on the link must use the same key. MD5 authentication is more secure: ip ospf message-digest-key 1 md5 MyPassword and ip ospf authentication message-digest. CCNP and CCIE require authentication in multi-area and redistribution labs. In production, Indian banks and payment processors mandate OSPF authentication under RBI cybersecurity directives.

How does OSPF handle equal-cost paths?

OSPF installs up to 4 equal-cost paths by default (configurable up to 16 with maximum-paths). Traffic is load-balanced across all paths using CEF (Cisco Express Forwarding). Per-destination load balancing hashes the source and destination IP to select one path, ensuring packets in the same flow take the same path (important for TCP). Per-packet load balancing round-robins packets across paths, which can cause out-of-order delivery and TCP performance issues. Modern IOS defaults to per-destination. Verify with show ip cef and tune with ip load-sharing per-packet or ip load-sharing per-destination under the interface.

Mastering single-area OSPF configuration and verification is the foundation for every Cisco certification path and every network engineering role in India. Whether you are preparing for CCNA 200-301, interviewing at Cisco India or HCL, or starting your 4-month paid internship at a Network Security Operations Division partner, the skills in this chapter—neighbor adjacency, router ID assignment, network statements, passive interfaces, and verification commands—are tested daily. Practice these labs in our HSR Layout facility with 24×7 rack access, validate your configurations with show commands, and troubleshoot broken topologies until the process becomes muscle memory. OSPF is not just an exam topic; it is the routing protocol that powers Indian enterprise networks, and your proficiency with it determines your career trajectory from NOC engineer to network architect.