topic Re: Redistribution host address between protocols in General Topics

Redistribution host address between protocols

DexinLi — Fri, 22 Apr 2022 14:58:55 GMT

Dear experts

I set a PA firewall as an ASBR, connects to a RIP and a OSPF area with eth1/1 and eth1/2 respectively. And created 2 loopback interfaces on PA, advertised them into RIP and OSPF respectively. Then I can reach them within RIP and OSPF area separately. Now I create redistribution profiles RIP-2-OSPF and OSPF-2-RIP, and apply them to OSPF and RIP. Finally, I only can reach the loopback address on cisco routers in two areas each other, but can't see the loopback address on PA. That is to say, I can't reach any PA's /32 host address which is advertised in RIP AS from OSPF and vice versa. Why? Any setting is missed by me? Thanks

Re: Redistribution host address between protocols

BPry — Sat, 23 Apr 2022 07:37:51 GMT

@DexinLi,

Assuming that you're testing via ICMP, do you have an interface mgmt profile assigned that actually allows ICMP from the host you are testing from? Without a management profile assigned on the loopback interface the interface would appear to be unreachable.

Re: Redistribution host address between protocols

DexinLi — Sun, 24 Apr 2022 01:35:19 GMT

Thank you so much, Gentlemen, for your prompt reply

Let me illustrate my question with below diagram.

Loopback0 is advertised into RIP and pingable from R1

Loopback1 is advertised into OSPF and pingable from R2

Do redistribute between RIP and OSPF.

Loopback address of R1 is reachable from R2 and Loopback address of R2 is also reachable from R1.

But Loopback0 of firewall can't reach from R2 and Loopback1 of firewall can't reach from R1.

That's to say, loopback address of firewall can't be redistributed between protocols. Why?

I test the same situation on cisco router, there's no problem. Any special settings is needed? Thanks

Re: Redistribution host address between protocols

PavelK — Sun, 24 Apr 2022 22:41:57 GMT

Thank you for the post @DexinLi

if you are trying to redistribute loopback interface of the Firewall, then it is redistribution of connected route and not RIP/OSPF learned route. I would try to configure 2 redistribution profiles under: Network > Virtual Router > [VR name] > Redistribution Profile

then create one for Loopback.1 (select source type: connect and select: Redist) and another one for Loopback.0 (select source type: connect and select: Redist).

Finally, I would redistribute profile for Loopback.1 into RIP and Loopback.0 into OSPF.

You can confirm result by checking routing table of R1 and R2.

Kind Regards

Pavel

Re: Redistribution host address between protocols

DexinLi — Mon, 25 Apr 2022 01:13:15 GMT

Thanks a lot, Pavel.

Understand. Loopback interface of Firewall can't be redistributed as learned route by dynamic route protocol like cisco. Actually, I can advertise both lookback addresses into RIP and OSPF area in parallel and don't need worry about conflict issue.