OSPF P2P - R82.10

[CaseyB]

Configuring OSPF this morning on R82.10 Build 271.

It appears that when using P2P mode, OSPF learned routes still show-up as hidden / inactive. Per sk116500 OSPF Point-to-Point on Ethernet configuration/functionality is available on all appliances in R81.10 and above versions.

While the functionality is there, it appears you still need to go the extra step and create a route-map to get this to work. Is there any plan to remove this extra step or did I configure something wrong?

I switched it from P2P to broadcast and everything worked as I originally thought without extra steps.

[cortnieg]

Hi Casey,

Can you share the OSPF P2P configuration from each GW? On the GW with the inactive/hidden routes, please share the output of "show ospf database" and "show route all".

Thanks,

Cortnie

[CaseyB]

I'll have to see about setting something up to get that for you. The firewall this was performed on has been in production for months now using broadcast. I still have a 3920 I have not deployed yet though.

[Chris_Atkinson]

Additionally, if you happen to have a TAC case open for this please share the SR so that we can follow-up internally.

[gkhokhlov]

Hi @Chris_Atkinson and @cortnieg we have a SR 6-0004456069, our customer uses P2P with /31 mask due to RFC 3021, but OSPF routes hidden and we can't fix it. 
One recommendation that we received from RnD and TAC is "change your configuration from /31 to /30 or other, because both routers must be in same network". 

But the RFC says that /31 can be used.

Is there a more detailed explanation of the reasoning behind this or any specific recommendations?

Or does Check Point not support this standard?

[Chris_Atkinson]

To be clear /31 usage and P2P networks are related but not the same requirement.

Suspect you will need to submit an RFE but you will need a workaround in the interim.

[gkhokhlov]

Thank you!