VRF in Check Point

[Hllrdm]

We need to isolate the networks of different enterprises.
At the L2 level - there will be a separation of vlan, at the routing level VRF.
Between the L3 switch and the router is a Check Point cluster. OSPF is configured between the switch, the cluster, and the router to receive routing tables.
We want to isolate the routing for each of the networks, in Cisco terminology use VRF. Is Check Point available to create virtual routing tables (VRF) within the cluster or do we need to create a VSX?
We need to build an additional OSPF link (a Check Point cluster with a switch and router), with an isolated routing table, in addition to OSPF with global routing table translation.

 

[Chris_Atkinson]

You can configure multiple OSPF instances/domains with R81+

Configuring IPv4 OSPFv2 Multiple Instances (checkpoint.com)

But if you require full VRF like separation this is what VSX (Virtual Systems) is used for within Check Point.

[Hllrdm]

Can you tell me, if we use OSPF instances/domains, can we separate the routing for different area and the tables will not overlap?

[Chris_Atkinson]

The Check Point gateway would only have one routing table for it's own forwarding decisions but the OSPF info shared with neighbors/interfaces is specific to the corresponding domains unless specific redistribution is configured.

This may not be sufficient depending on the given scenario but your diagram isn't super detailed in conveying what the objective is. 

[Hllrdm]

I have read the manual for setting up two or more OSPF instances. This solution works for us.
We still do not understand the "You can manually configure route maps to filter and redistribute routes from one domain into another domain" part of the admin guide. Does this need to be configured in the Route Redistributions window?

[Chris_Atkinson]

Basic route filters & redistribution can be done in the Web UI.

Advanced policy via route-maps are done in CLISH (CLI) where required refer sk100501 for supplementary info to that in the admin guide amongst other sources.