- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
As you noted, this is for route advertisements between sites, (including support with 3rd party devices now that everyone does VTI and IKEv2 with Universal Traffic Selectors). You can use unnumbered VTIs and proxy off an internal interface (or loopback) and avoid subnet allocation management. You could also use the 169.254.1.0/24 subnet if you needed a numbered VTI (this is what Amazon AWS uses).
As for the "work", once you get the first one done, especially for unnumbered VTIs, you can either add more with Ansible or your own API script. It's largely a one-and-done, copy/paste/paste/paste, implementation. Routing policies with BGP route-maps gives you extensive control of traffic engineering. Lots of good reasons. 😀
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY