- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hi
I'm trying to filter some OSPF tagged routes using route-maps.
Seems like it filters all the OSPF external routes rather then specific tagged one's.
Anyone encountered same or can advice?
Version: R77.30
Commands:
set routemap ospf-import id 10 on
set routemap ospf-import id 10 restrict
set routemap ospf-import id 10 match tag 778 on
set routemap ospf-import id 20 on
set routemap ospf-import id 20 allow
set ospf import-routemap ospf-import preference 1 on
Before:
FW1> show route ospf
Codes: C - Connected, S - Static, R - RIP, B - BGP (D - Default),
O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA)
A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed,
U - Unreachable, i - Inactive
O 10.2.2.4/30 via 10.11.7.10, bond1.1107, cost 5, age 4863523
via 172.23.101.80, bond1.1106
via 172.23.101.81, bond1.1106
O 10.14.98.11/32 via 10.14.99.11, bond2.1499, cost 2, age 5024684
O 10.14.98.12/32 via 10.14.99.12, bond2.1499, cost 2, age 5024684
O 10.14.98.13/32 via 10.14.99.13, bond2.1499, cost 2, age 5024684
O 10.14.98.14/32 via 10.14.99.14, bond2.1499, cost 2, age 5024684
O E 10.165.249.0/24 via 10.14.99.11, bond2.1499, cost 1:20, age 4863523, tag 0x00000000
via 10.14.99.12, bond2.1499
via 10.14.99.13, bond2.1499
via 10.14.99.14, bond2.1499
O E 10.165.0.0/24 via 10.14.99.11, bond2.1499, cost 1:20, age 4863523, tag 0x00000000
via 10.14.99.12, bond2.1499
via 10.14.99.13, bond2.1499
via 10.14.99.14, bond2.1499
O E 10.0.0.0/8 via 172.23.101.69, bond1.1106, cost 2401:0, age 6929627, tag 0x0000030a
O E 172.16.0.0/12 via 172.23.101.69, bond1.1106, cost 2401:0, age 6929627, tag 0x0000030a
O E 192.168.0.0/16 via 172.23.101.69, bond1.1106, cost 2401:0, age 6929627, tag 0x0000030a
AKmdrL9LabDCFW1>
After:
FW1> show route ospf
Codes: C - Connected, S - Static, R - RIP, B - BGP (D - Default),
O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA)
A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed,
U - Unreachable, i - Inactive
O 10.2.2.4/30 via 10.11.7.10, bond1.1107, cost 5, age 4863590
via 172.23.101.80, bond1.1106
via 172.23.101.81, bond1.1106
O 10.14.98.11/32 via 10.14.99.11, bond2.1499, cost 2, age 5024751
O 10.14.98.12/32 via 10.14.99.12, bond2.1499, cost 2, age 5024751
O 10.14.98.13/32 via 10.14.99.13, bond2.1499, cost 2, age 5024751
O 10.14.98.14/32 via 10.14.99.14, bond2.1499, cost 2, age 5024751
AKmdrL9LabDCFW1>
Hello,
according to documentation: "currently, you can only use this feature to export OSPF routes to BGP"
Hello,
in Gaia Advanced Routing Administration Guide it is written that "Currently, you can only use this feature to export OSPF routes to BGP", so it will not work for your import.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY