SRX

Hi,

I;ve a SRX650, Reth1 (trust) is participating in ospf area 0, if I configure Reth2 (untrust) with an IP address will it be automatically be redistributed into ospf on Reth1 area 0?

Can someone explain how ospf operates in regards to redistribution of connected subnets on the SRX series or point me to a doc please?

Many thanks,

Paul

You will need to place the reth2 I/F into the OSPF area that  you want it distributed into. Only interfaces specified in an area will be redistributed. You can also use the passive option if you want the subnet to be redistributed but do not want an adjacency to be formed on that subnet.

Have you downloaded the Fast Track materials for Juniper? The Juniper Routing Essentials gives a good "basic" overview of how OSPF works on Juniper. For more detail I would recommend that JUNOS Enterprise Routing by Reynolds and Marschke (OReilly Books)

Hi,

You can also redistribute routes.  In the example below, tunnel interface st0.0 is in area 3.  Both connected and static routes are being redistributed as type 1 with a metric of 20.  I hope this example helps.

protocols {
    ospf {
        export [ Connected-Routes Static-Routes ];
        area 0.0.0.3 {
            interface st0.0 {
                interface-type p2mp;
                hello-interval 10;
                dead-interval 40;
            }
        }
    }
}

policy-options {
    policy-statement Connected-Routes {
        from {
            protocol direct;
            route-filter 10.100.1.0/24 exact;
        }
        then {
            metric 20;
            local-preference 20;
            external {
                type 1;
            }
            accept;                     
        }
    }
    policy-statement Static-Routes {
        from {
            protocol static;
            route-filter 10.100.5.0/24 exact;
            route-filter 10.100.20.0/24 exact;
            route-filter 10.100.30.0/24 exact;
        }
        then {
            metric 20;
            external {
                type 1;
            }
            accept;
        }
    }
}

Thanks Guys,

I'll take your suggestions on board.

So my take is that if the interface is not specified in the ospf config it's IP address will NOT be redistributed into OSPF.

Regards,

Paul

Yep - it has to get in there one way or the other. Direct I/F into OSPF or through route policy.