OSPF routes on SG

[Ihenock1011]

Hi All,

We have Check Point Security Gateway R81.10 7K series with VSX enabled. 

In one of the VS routing setup, OSPF has been configured with "distribute connected" command. Consequently, the VS advertises all directly connected routes to the OSPF neighbor device.

However, I am seeking assistance on excluding specific IP subnets from being advertised by OSPF. Could you kindly guide me on whether there is a specific command for exclusion, or if there is a recommended approach to achieve this more effectively?

Thanks,

[mccabe]

I haven't done this myself (will try to lab later if I get time), but the relevant CLI command would appear to be:

set ospf area [area] ID] range [IPV4 address/Mask Length] on|off

eg:

set ospf area backbone range 192.168.1.0/24 on

You may have to remove the 'distribute connected' command to assert this.

https://dl3.checkpoint.com/paid/d2/d23ccfa2e14085f23ac7997c5553cf80/CP_R81_Gaia_Advanced_Routing_Adm...