- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
We are running R80.20 on VSX and have question about OSPF instance. The firewall have OSPF default instance going to other firewall on vlan-97 as follow.
> show configuration ospf
set ospf instance default graceful-restart-helper on
set ospf instance default area backbone on
set ospf instance default interface bond0.97 area backbone on
set ospf instance default import-routemap ospf-bast-import preference 10 on
set ospf instance default export-routemap ospf-bast-export preference 10 on
Now we want to add new 3 vlans 35, 36, 37. Each vlan have /30 subnet, one IP on firewall and 2nd IP on Cisco vpn-rtr. Cisco Vpn-rtr is running vrf for each vlan. We want to run OSPF. Can we add following instance on OSPF config.
Are the following command are good. And to delete instance “ delete ospf instance 35” will work?
set ospf instance 35 graceful-restart-helper on
set ospf instance 35 area backbone on
set ospf instance 35 interface bond0.35 area backbone on
set ospf instance 35 import-routemap ospf-prtr-import preference 10 on
set ospf instance 35 export-routemap ospf-prtr-export preference 10 on
set ospf instance 36 graceful-restart-helper on
set ospf instance 36 area backbone on
set ospf instance 36 interface bond0.36 area backbone on
set ospf instance 36 import-routemap ospf-prtr-import preference 10 on
set ospf instance 36 export-routemap ospf-prtr-export preference 10 on
set ospf instance 37 graceful-restart-helper on
set ospf instance 37 area backbone on
set ospf instance 37 interface bond0.37 area backbone on
set ospf instance 37 import-routemap ospf-prtr-import preference 10 on
set ospf instance 37 export-routemap ospf-prtr-export preference 10 on
====================
VPN-RT ospf config for one vlan as follow.
interface Port-channel1.35
encapsulation dot1Q 35
vrf forwarding Partner-Example
ip address 10.118.126.2 255.255.255.252
ip ospf 35 area 0
router ospf 35 vrf Partner-Example
passive-interface default
no passive-interface Port-channel1.35
Thanks in advance.
I'm not sure what you want. Are you trying to configure OSPF per virtual system (VS) in VSX to peer with a vrf OSPF instance on the Cisco router? That is, you have 3 VSX virtual systems namely "35, 36, 37" and want each VS OSPF to peer with a Cisco vrf OSPF?
Yes, that is correct. Thanks
Sorry correction. We are trying to configure multiple OSPF instance on same virtual system (VS) in VSX to peer with a vrf OSPF instance on the Cisco router. We already have default instance on that virtual system in VSX and now we want to add 3 new instance id # 35, 36, and 37. On Cisco router 3 vrf (# 35, 36, and 37) are running ospf. Thanks for the help.
Yes, your commands seem all correct.
To delete an ospf instance, do:
set ospf instance <instance-num> off
Thank you.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 20 | |
| 19 | |
| 18 | |
| 8 | |
| 7 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY