https://community.checkpoint.com/t5/General-Topics/Advertise-Network-Configured-as-Encryption-Domains-into-OSPF/m-p/129938#M23653 <P>We are using OSPF on our border firewalls. With that said, we have a need to advertise various subnets into OSPF. However, I do not want to create static routes for these various networks, The various networks I want to redistribute into OSPF are the subnets we have for encryption domains to customers who VPN into our org. Is there any setting that will allow an encryption domain network object to be advertised into OSPF?</P> Wed, 22 Sep 2021 12:54:15 GMT Matt_Hubach 2021-09-22T12:54:15Z https://community.checkpoint.com/t5/General-Topics/Advertise-Network-Configured-as-Encryption-Domains-into-OSPF/m-p/129938#M23653 <P>We are using OSPF on our border firewalls. With that said, we have a need to advertise various subnets into OSPF. However, I do not want to create static routes for these various networks, The various networks I want to redistribute into OSPF are the subnets we have for encryption domains to customers who VPN into our org. Is there any setting that will allow an encryption domain network object to be advertised into OSPF?</P> Wed, 22 Sep 2021 12:54:15 GMT https://community.checkpoint.com/t5/General-Topics/Advertise-Network-Configured-as-Encryption-Domains-into-OSPF/m-p/129938#M23653 Matt_Hubach 2021-09-22T12:54:15Z https://community.checkpoint.com/t5/General-Topics/Advertise-Network-Configured-as-Encryption-Domains-into-OSPF/m-p/129940#M23654 <P>Have a look at the "NAT pool" option introduced in R81. It serves a similar purpose for redistributing networks used for NAT, maybe it can be useful for you.</P> Wed, 22 Sep 2021 13:28:11 GMT https://community.checkpoint.com/t5/General-Topics/Advertise-Network-Configured-as-Encryption-Domains-into-OSPF/m-p/129940#M23654 Chris_Atkinson 2021-09-22T13:28:11Z