topic Re: OSPF instance in Firewall and Security Management

OSPF instance

CPRQ — Tue, 05 Nov 2019 21:30:21 GMT

We are running R80.20 on VSX and have question about OSPF instance. The firewall have OSPF default instance going to other firewall on vlan-97 as follow.

> show configuration ospf

set ospf instance default graceful-restart-helper on

set ospf instance default area backbone on

set ospf instance default interface bond0.97 area backbone on

set ospf instance default import-routemap ospf-bast-import preference 10 on

set ospf instance default export-routemap ospf-bast-export preference 10 on

Now we want to add new 3 vlans 35, 36, 37. Each vlan have /30 subnet, one IP on firewall and 2nd IP on Cisco vpn-rtr. Cisco Vpn-rtr is running vrf for each vlan. We want to run OSPF. Can we add following instance on OSPF config.

Are the following command are good. And to delete instance “ delete ospf instance 35” will work?

set ospf instance 35 graceful-restart-helper on

set ospf instance 35 area backbone on

set ospf instance 35 interface bond0.35 area backbone on

set ospf instance 35 import-routemap ospf-prtr-import preference 10 on

set ospf instance 35 export-routemap ospf-prtr-export preference 10 on

set ospf instance 36 graceful-restart-helper on

set ospf instance 36 area backbone on

set ospf instance 36 interface bond0.36 area backbone on

set ospf instance 36 import-routemap ospf-prtr-import preference 10 on

set ospf instance 36 export-routemap ospf-prtr-export preference 10 on

set ospf instance 37 graceful-restart-helper on

set ospf instance 37 area backbone on

set ospf instance 37 interface bond0.37 area backbone on

set ospf instance 37 import-routemap ospf-prtr-import preference 10 on

set ospf instance 37 export-routemap ospf-prtr-export preference 10 on

====================

VPN-RT ospf config for one vlan as follow.

interface Port-channel1.35

encapsulation dot1Q 35

vrf forwarding Partner-Example

ip address 10.118.126.2 255.255.255.252

ip ospf 35 area 0

router ospf 35 vrf Partner-Example

passive-interface default

no passive-interface Port-channel1.35

Thanks in advance.

Re: OSPF instance

tnguyen — Fri, 08 Nov 2019 00:06:51 GMT

I'm not sure what you want. Are you trying to configure OSPF per virtual system (VS) in VSX to peer with a vrf OSPF instance on the Cisco router? That is, you have 3 VSX virtual systems namely "35, 36, 37" and want each VS OSPF to peer with a Cisco vrf OSPF?

Re: OSPF instance

CPRQ — Fri, 08 Nov 2019 13:58:11 GMT

Yes, that is correct. Thanks

Re: OSPF instance

CPRQ — Fri, 08 Nov 2019 14:47:43 GMT

Sorry correction. We are trying to configure multiple OSPF instance on same virtual system (VS) in VSX to peer with a vrf OSPF instance on the Cisco router. We already have default instance on that virtual system in VSX and now we want to add 3 new instance id # 35, 36, and 37. On Cisco router 3 vrf (# 35, 36, and 37) are running ospf. Thanks for the help.

Re: OSPF instance

tnguyen — Tue, 12 Nov 2019 23:06:27 GMT

Yes, your commands seem all correct.

To delete an ospf instance, do:

set ospf instance <instance-num> off

Re: OSPF instance

CPRQ — Wed, 13 Nov 2019 16:01:41 GMT

Thank you.