OSPF routes showing up as hidden

brk_01 — Wed, 09 Aug 2023 15:05:00 GMT

I have an ospf area created between pairs of cisco 6807s, cisco 9500s and checkpoint 28000s (r81.10 JHF 66)

((cisco 6807 <--> (eth3-04) CP28000 (eth3-01) <--> cisco 9500))

PTP connections between the cisco devices and the Firewalls.

I have a vlan(s) hosted on the 6807s, advertised through OSPF, and other vlan(s) on the 9500s. These vlans are configured the same on the cisco boxes (obviously different subnets).

On the firewall, I see the 6807 vlan(s) and they work, but the vlan(s) from the 9500s are showing up as Hidden / Inactive (although I do see them in the route table on the 6807s).

on the fw:

>show route ospf all

O x.x.0.0/28 via y.y.0.73, eth3-04, cost 1001, age 34609, instance default (6807 hosted)
O x.x.0.16/28 via y.y.0.73, eth3-04, cost 1001, age 34609, instance default (6807 hosted)
O H i x.x.0.32/28 is an unusable route (9500 hosted)
O H i x.x.0.48/28 is an unusable route (9500 hosted)
O H i x.x.64/28 is an unusable route (9500 hosted)
O H i y.y.0.72/31 is an unusable route (9500 hosted)
O H i y.y.0.74/31 is an unusable route (9500 hosted)

>show ospf interfaces

Name IP Address Area ID State NC DR Interface BDR Interface Errors
eth3-04 y.y.0.72 0.0.0.60 P2P 1 N/A N/A 1
eth3-01 y.y.0.75 0.0.0.60 P2P 1 N/A N/A 0

on the 6807s

#show ip route

O x.x.0.32/28 [110/1101] via y.y.0.72, 09:45:30, TenGigabitEthernet7/15
O x.x.0.48/28 [110/1101] via y.y.0.72, 09:45:30, TenGigabitEthernet7/15
O x.x.0.64/28 [110/1101] via y.y.0.72, 09:45:30, TenGigabitEthernet7/15

on the 9500s

#show ip route

O x.x.0.0/28 [110/1101] via y.y.0.75, 09:45:05, TenGigabitEthernet2/1/2
O x.x.0.16/28 [110/1101] via y.y.0.75, 09:45:05, TenGigabitEthernet2/1/2

I have involved TAC, but no resolution as of yet.

Any ideas i can look at?

Re: OSPF routes showing up as hidden

the_rock — Wed, 09 Aug 2023 15:12:19 GMT

We had exact same issue with the client last year. I will look at the notes and see how we fixed it. Also had TAC case for it, but it was 2 months and no luck, so we had to figure it out ourselves : - )

Re: OSPF routes showing up as hidden

the_rock — Wed, 09 Aug 2023 16:44:08 GMT

Just had quick chat with a colleague and he said that one would need to import route map to add them to the global routing table, which is what we did for the customer.

topic OSPF routes showing up as hidden in Firewall and Security Management

OSPF routes showing up as hidden

Re: OSPF routes showing up as hidden

Re: OSPF routes showing up as hidden