Advertise Network Configured as Encryption Domains into OSPF

[Matt_Hubach]

We are using OSPF on our border firewalls. With that said, we have a need to advertise various subnets into OSPF. However, I do not want to create static routes for these various networks, The various networks I want to redistribute into OSPF are the subnets we have for encryption domains to customers who VPN into our org. Is there any setting that will allow an encryption domain network object to be advertised into OSPF?

[Chris_Atkinson]

Have a look at the "NAT pool" option introduced in R81. It serves a similar purpose for redistributing networks used for NAT, maybe it can be useful for you.