OSPF hello packets serve a dual purpose: establishing neighborships and acting as keep-alives to detect when adjacent routers go offline. Understanding hello and dead interval timers is essential for controlling how quickly OSPF responds to topology changes.
OSPF Hello Timers
We've talked about how OSPF uses hello packets to create neighborships with other routers on the same link. However, these OSPF hello packets serve another really important purpose, and that is something called a keepalive. It allows the routers to know if that neighboring router is still up and running.
If there's two routers that have created adjacencies and are talking back and forth, and one minute a router goes down, that other router needs to know that it's down and needs to notify the rest of the network that that link is no longer viable. So what these routers will do is send hellos every 10 seconds, every 30 seconds, or whatever you set it to, to notify "hey, I'm still up and running." We call these keepalives. It keeps the link alive, it keeps the neighborship alive.
So let's go over in our network here. Router 2 has a neighborship with router 3. They've exchanged hello packets and are aware of each other. Now, if router 3 were to go down, router 2 may still continue to send traffic in that direction; it may not know that router 3 is down. So the hello packets will continue to send just to make sure that that neighborship stays alive. It will send every 10 seconds, every 30 seconds over to router 2 and just let it know, hey, I'm still up. And if a certain period goes by and router 2 does not receive a hello packet from router 3, it's going to assume that router 3 is down, and then it's going to take it out of its neighbor table and readjust to try to send to this network if there's an alternate route to that network.
Hello timers determine how chatty your interface is going to be. One of those timers is the hello interval. The hello interval is going to be how often the hello packets are going to be exchanged. So for instance, if we have a hello timer of 10 seconds, then that means every 10 seconds router 3 is going to send a message to router 2, and vice versa: every 10 seconds router 2 is going to send to router 3. So that's how often they're going to exchange those hello packets.
10 seconds is the standard for a point-to-point or a broadcast network. We have a point-to-point and HDLC set up on these two links, so that would qualify as that, so these by default would be 10 seconds. Every 10 seconds it's going to be sending back and forth.
Alternatively, we could have a non-broadcast multi-access or a point-to-multipoint network. These are ethernet connections over here and here, and so those ethernet connections are non-broadcast multi-access, so the default for that is 30 seconds. So it's going to vary depending on the interface that we have.
So that's the hello interval. The dead interval is going to be: if I don't hear from you in this amount of time, then I'm going to assume that you are down. The dead interval for these connections is four times whatever the hello interval is going to be, so 40 seconds for the broadcast networks, and it's going to be 120 seconds for these non-broadcast multi-access networks. That is the dead interval. If I haven't heard from you in 40 seconds or 120 seconds, I'm going to assume that you're down and then figure out a different way to get to those networks. I'm going to recalculate.
When we're setting up these links and establishing these neighbor adjacencies, we do need these hello and dead intervals to be the same. Within that hello packet that we saw that's sent back and forth, these details go into that, and to create this adjacency they do need to be the same on both of the interfaces.
Now, there are times that we may want to change the default for the hello interval and the dead interval, so we can actually configure this and change the default. If we were to do this, we want to once again do it on each of the sides, but this is a per-interface setting. So this link could be set to 10 seconds while this link maybe is set for 20 seconds. Maybe the bandwidth is not as large and so we want to conserve some bandwidth, or perhaps this link right here is a very stable link and we're not concerned with it going down as much. There might be some reasons why we'd want to change this.
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →