05-08-2012 06:42 AM
hope some help !
i have 3 SSG320 each one have trust-vr & untrust-vr ,the DR SSG is connected to the others through ospf and its working
fine but after configure redistribution from the connected network in DR-ssg it dosn't showing in routing table in the other SSG320
thanks in advance
Solved! Go to Solution.
05-08-2012 02:09 PM
You don't give much details, so some guessing from my side. Your talking just about redistribution in a dual VR config. Did you also configure export from trust-vr to untrust-vr? Are the routes you want to distribute visable in the same vr ospf is running?
JNCIA IDP AC WX JNCIS FW SSL JNCIP SEC ENT SP JNCI
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
05-09-2012 12:58 AM
thanks for your replay ,yes i think my post not clear
i configure ospf between 3 ssg through the untrust-vr and its working fine ,but when adding and export the connected network in trust-vr to OSPF in untrust-vr it dosen't work .
set access-list 10 set access-list 10 permit ip 188.8.131.52/24 101
set access-list 10 permit ip 184.108.40.206/24 102
set access-list 10 permit ip 220.127.116.11/24 104
set route-map name "dist" permit 101 set match ip 10
set route-map name "dist" permit 102 set match ip 10
set route-map name "dist" permit 103 set match ip 10
set export-to vrouter "untrust-vr" route-map "dist" protocol ospf
set vrouter "untrust-vr" set protocol ospf set enable
set area 0.0.0.20
set vrouter "untrust-vr"
set interface ethernet0/1 protocol ospf area 0.0.0.20 set interface ethernet0/1 protocol ospf enable set interface ethernet0/1 protocol ospf cost 100
hoping its clear and thanks for advance
05-09-2012 04:57 AM
So, if I understand what you're trying to do correctly, you to 1) export "connected" routes from trust vr to untrust vr (say protocol connected instead of protocol ospf), and 2) in untrust vr redistribute "imported" routes into ospf (you'll need to define access list and route map in there, too).
Also, in your route map, entries 102 and 103 are redundant.