topic Re: redistribute static routes including next hop as next VR in ospf in General Topics

redistribute static routes including next hop as next VR in ospf

Deepak25 — Tue, 31 Aug 2021 16:10:35 GMT

we have two VR

1. Default :

eth1/1 - 10.1.1.0/24 L3_LAN Zone

eth1/2 - 10.1.2.0/24 L3_DMZ zone

eth1/3 - internet

2.New_VR

tunnel interface tunnel.1_global protect tunnel

eth1/4 - Branch

Core ------- PA ------------------Branch router

We want to enable ospf in New_VR . As per requirement DMZ subnet of default VR and GP ip pool should redistribute via ospf to Branch router in New_VR

we found below solution :

1. There will be static route for DMZ subnet in New_VR.

so to reach DMZ subnet next hop will be "next VR" which is a default VR in our case.

So we can redistribute this static route using redistribution profile.

2. Tunnel interface will be connected in New_VR

So we can redistribute tunnel interface which is connected in new_VR

Have query on above solution :

1. static routes will be with next hop as "next VR' , will it work ?

2. There is no route for GP ip pool and no ip-address we mention on tunnel interface of global protect . if select tunnel interface in

redistribution profile , gp ip pool will redistribute ?

3. Does firewall by default redistribute routes of another VR if we configure redistribution profile ? Cause after configuring redistribution profile in New_VR for its tunnel interface and DMZ static route , it should not redistribute subnet of Default VR .Otherwise it will be impact for us.

Re: redistribute static routes including next hop as next VR in ospf

Neal.Gomes — Sun, 10 Dec 2023 01:43:49 GMT

Hello Deepak,

I know this is an old post, but did you ever find an answer or solution to this. I'm having a similar issue where I'm trying to redistribute a few static routes with next hop of "next vr" into BGP, but the subnets in question with next hop of "next vr" are not being redistributed into BGP and therefore the BGP peer neighbor is not receiving these routes.

I'm thinking this might be a limitation due to the actual route existing in a different VR, but was hoping you (or someone else) might have some clarity on this or maybe some sort of workaround.

Any insight on this by anyone would be greatly appreciated.

Thank you

Re: redistribute static routes including next hop as next VR in ospf

Neal.Gomes — Sun, 10 Dec 2023 23:05:35 GMT

Nevermind... scratch my last comments... Found a misconfiguration in my config. I had the route distribution profile used for BGP set to "no-redistribute" instead of "redistribute"... So yes, you can redistribute static routes with next hop value of next vr incase anyone was wondering still.