- Products
- Learn
- Local User Groups
- Partners
-
More
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
IDC Spotlight -
Uplevel The SOC
Important! R80 and R80.10
End Of Support around the corner (May 2021)
We are running R80.20 on VSX and have question about OSPF instance. The firewall have OSPF default instance going to other firewall on vlan-97 as follow.
> show configuration ospf
set ospf instance default graceful-restart-helper on
set ospf instance default area backbone on
set ospf instance default interface bond0.97 area backbone on
set ospf instance default import-routemap ospf-bast-import preference 10 on
set ospf instance default export-routemap ospf-bast-export preference 10 on
Now we want to add new 3 vlans 35, 36, 37. Each vlan have /30 subnet, one IP on firewall and 2nd IP on Cisco vpn-rtr. Cisco Vpn-rtr is running vrf for each vlan. We want to run OSPF. Can we add following instance on OSPF config.
Are the following command are good. And to delete instance “ delete ospf instance 35” will work?
set ospf instance 35 graceful-restart-helper on
set ospf instance 35 area backbone on
set ospf instance 35 interface bond0.35 area backbone on
set ospf instance 35 import-routemap ospf-prtr-import preference 10 on
set ospf instance 35 export-routemap ospf-prtr-export preference 10 on
set ospf instance 36 graceful-restart-helper on
set ospf instance 36 area backbone on
set ospf instance 36 interface bond0.36 area backbone on
set ospf instance 36 import-routemap ospf-prtr-import preference 10 on
set ospf instance 36 export-routemap ospf-prtr-export preference 10 on
set ospf instance 37 graceful-restart-helper on
set ospf instance 37 area backbone on
set ospf instance 37 interface bond0.37 area backbone on
set ospf instance 37 import-routemap ospf-prtr-import preference 10 on
set ospf instance 37 export-routemap ospf-prtr-export preference 10 on
====================
VPN-RT ospf config for one vlan as follow.
interface Port-channel1.35
encapsulation dot1Q 35
vrf forwarding Partner-Example
ip address 10.118.126.2 255.255.255.252
ip ospf 35 area 0
router ospf 35 vrf Partner-Example
passive-interface default
no passive-interface Port-channel1.35
Thanks in advance.
I'm not sure what you want. Are you trying to configure OSPF per virtual system (VS) in VSX to peer with a vrf OSPF instance on the Cisco router? That is, you have 3 VSX virtual systems namely "35, 36, 37" and want each VS OSPF to peer with a Cisco vrf OSPF?
Yes, that is correct. Thanks
Sorry correction. We are trying to configure multiple OSPF instance on same virtual system (VS) in VSX to peer with a vrf OSPF instance on the Cisco router. We already have default instance on that virtual system in VSX and now we want to add 3 new instance id # 35, 36, and 37. On Cisco router 3 vrf (# 35, 36, and 37) are running ospf. Thanks for the help.
Yes, your commands seem all correct.
To delete an ospf instance, do:
set ospf instance <instance-num> off
Thank you.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY