Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Ihenock1011
Advisor

OSPF routes on SG

Hi All,

We have Check Point Security Gateway R81.10 7K series with VSX enabled. 

In one of the VS routing setup, OSPF has been configured with "distribute connected" command. Consequently, the VS advertises all directly connected routes to the OSPF neighbor device.

However, I am seeking assistance on excluding specific IP subnets from being advertised by OSPF. Could you kindly guide me on whether there is a specific command for exclusion, or if there is a recommended approach to achieve this more effectively?

Thanks,

0 Kudos
1 Reply
mccabe
Employee
Employee

I haven't done this myself (will try to lab later if I get time), but the relevant CLI command would appear to be:

set ospf area [area] ID] range [IPV4 address/Mask Length] on|off

eg:

set ospf area backbone range 192.168.1.0/24 on

You may have to remove the 'distribute connected' command to assert this.

 

https://dl3.checkpoint.com/paid/d2/d23ccfa2e14085f23ac7997c5553cf80/CP_R81_Gaia_Advanced_Routing_Adm...

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events