topic Re: Separating OSPF into Multiple Instances in Firewall and Security Management

Separating OSPF into Multiple Instances

TheBigLebeauski — Wed, 03 Jul 2024 21:32:15 GMT

Hello!

I was curious if anyone has leveraged the ability to separate OSPF into different instances on the same gateway.

Questions:

1) What was the reason for it?

2) Did it pan out?

3) Any gotchas or interesting things that happened after implementing?

Looking at doing this for a client and wanted to gather some insight before recommending it.

Cheers!

Re: Separating OSPF into Multiple Instances

the_rock — Thu, 04 Jul 2024 00:26:54 GMT

I know one customer had to do this while ago because of the other side, but though it worked, I cant remember exactly all we had to do, so will check if I can find any notes about it tomorrow.

Did it pan out? Yes, we did make it work. Any gotchas or interesting things after it was done? Um, actually yes lol. I vaguely recall specific traffic was getting dropped and it had to do with IPS, but this was back in R80.10, so lots has changed since then.

Andy

Re: Separating OSPF into Multiple Instances

TheBigLebeauski — Mon, 08 Jul 2024 21:58:47 GMT

Thanks for the insight! After talking to some of my colleagues, I'm thinking unless there is a specific reason to separate things into multiple instances, I'll be recommending to my client to just leave well enough alone. If it ain't broke....

Re: Separating OSPF into Multiple Instances

the_rock — Mon, 08 Jul 2024 23:13:47 GMT

So sorry man, totally forgot to check on this for you, my sincere apologies : - (. Just went through my notes and I found that it was Cisco ASR in question and it also involved ospf enabled loopback interface, so Im fairly sure that is why all this was done.

I agree with you, why fix it if it aint broke 🙂

Cheers and again, accept my apologies for not updating you sooner.

Best,

Andy