topic Re: Vsx ospf behavior after upgrade to R80.40 in Firewall and Security Management

Vsx ospf behavior after upgrade to R80.40

Maller — Mon, 24 May 2021 12:56:41 GMT

Hi all

I'm planning an upgrade from r80.10 to r80.40 on vsx cluster (vs0,vs1,vs2).

This cluster is talking ospf with a router. My doubt is about behavior of vs1 and vs2 , these virtual systems only have dynamic ospf routes.

After upgrade and until policy is installed , routed daemon is stopped right?

How vs1 and vs2 can connect to management server?

Static route is needed , right?

Re: Vsx ospf behavior after upgrade to R80.40

PhoneBoy — Wed, 26 May 2021 20:20:11 GMT

routed should still operate but it's entirely possible the communication of routed will be blocked until a policy that allows such traffic is installed.
(I don't recall if OSPF is included in the implied rules)
It would be prudent to ensure appropriate static routes exist.

Re: Vsx ospf behavior after upgrade to R80.40

Maller — Thu, 27 May 2021 07:59:02 GMT

Hi , thank you for answer.

I've been checking again and this vsx is configured as separated interfaces . Reading docs I see that this topology creates a DMI by default.

So , with this topology vsx gateway and VS are totally managed via DMI?

Sorry but I'm new with VSX.

Thanks

Re: Vsx ospf behavior after upgrade to R80.40

Maarten_Sjouw — Thu, 27 May 2021 09:30:10 GMT

All communication between management and VS1 and VS2 is done via VS0, so as long as VS0 and Management sever can reach each other there should be no prblem at all.