topic Re: Disabling the route from ospf to smb in Spark Firewall (SMB)

Disabling the route from ospf to smb

Hllrdm — Tue, 18 Oct 2022 07:47:55 GMT

Our ospf route is 0.0.0.0/0 and we can't access the internet because we can't set a default route to the ISP.
Is there a command that will allow us to disable the route 0.0.0.0 that was received from the ospf?

Re: Disabling the route from ospf to smb

emmap — Tue, 18 Oct 2022 07:56:08 GMT

By default, all OSPF routes are accepted when advertised from neighbours. You can disable this behaviour, but you would then have to configure route redistribution / routemaps to accept what you need to accept.

Alternatively you prevent the advertising of the default on the neighbour end.

Alternatively alternatively, you can set the static route with a higher metric than the OSPF route.

Re: Disabling the route from ospf to smb

Hllrdm — Tue, 18 Oct 2022 08:38:36 GMT

Could you tell the command for SMB how we can create a static default route with a higher metric?

Re: Disabling the route from ospf to smb

Hllrdm — Tue, 18 Oct 2022 08:45:23 GMT

I am having a problem with the smb device. When I set the security policies I get the default route to the ISP and the ospf access is lost.
But when I enter the command fw unloadlocal I get the default route to the router ospf and no internet access.
Has anyone encountered this problem?

Re: Disabling the route from ospf to smb

Chris_Atkinson — Wed, 19 Oct 2022 01:37:38 GMT

By default static routes have a protocol rank of 60.

Comparatively OSPF routes have a default rank of 10 or 150 (external) depending on their origin.

Gateway-ID-Test> set protocol-rank protocol ospf
ipv4-routes - ipv4-routes
ipv6-routes - ipv6-routes
rank - Rank