Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
RickyDan
Participant

Advertise policy-based vpn route in OSPF

I have a policy-based site-to-site tunnel to Azure and my Azure networks will be in the 10.0.0.0/8 address space.

How do I advertise this route in OSPF?

Running 3600T/3800 on R80.40 Take 118

0 Kudos
4 Replies
PhoneBoy
Admin
Admin

You can only advertise a route that is configured somewhere (e.g. statically) and then redistribute that to OSPF.

0 Kudos
RickyDan
Participant

Yes so is there a static route I can create for this route and then advertise? Do I just put any random next-hop address or is there something specific I must do?

0 Kudos
PhoneBoy
Admin
Admin

My inclination would be to configure the route to use whatever the next hop is for the default route.
But that's just a guess.

0 Kudos
Timothy_Hall
Champion
Champion

I usually create the prefix as a blackhole route and then redistribute it which sounds scary, but as long as you have more specific routes than 10.0.0.0/8 in your routing table your traffic will still work fine.  In R81+ you can just create a special "NAT Pool" entity in the Gaia OS instead, see here: sk165333: How to Redistribute NAT Prefixes with BGP or OSPF

New 2021 IPS/AV/ABOT Self-Guided Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos