Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: nsp: juniper

Netscreen SSG-550 - Secondary IP not advertised in OSPF

 

 

nsp juniper RSS feed   Index | Next | Previous | View Threaded


vincent at autempspourmoi

Nov 29, 2007, 4:27 AM

Post #1 of 3 (956 views)
Permalink
Netscreen SSG-550 - Secondary IP not advertised in OSPF

Hello,

I am very new to Netscreen products.

I have configured a secondary IP address on the trusted interface of a
SSG-550; I can see the new subnet in the routing table (as "Connected"),
but it is not advertised to the OSPF neighbor.

Am I trying something impossible? If not, how do I have to do?

Vincent


yssaitoh at networld

Nov 29, 2007, 3:45 PM

Post #2 of 3 (915 views)
Permalink
Netscreen SSG-550 - Secondary IP not advertised in OSPF [In reply to]

Hello Vincent

this is saito.

please let me know your configration files.

would you config ospf in it collectly?

I think your config not completely or anthing problem config it.

thanks.




On Thu, 29 Nov 2007 13:27:56 +0100
Vincent De Keyzer <vincent at autempspourmoi.be> wrote:

> Hello,
>
> I am very new to Netscreen products.
>
> I have configured a secondary IP address on the trusted interface of a
> SSG-550; I can see the new subnet in the routing table (as "Connected"),
> but it is not advertised to the OSPF neighbor.
>
> Am I trying something impossible? If not, how do I have to do?
>
> Vincent
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp


sfouant at gmail

Nov 29, 2007, 9:14 PM

Post #3 of 3 (993 views)
Permalink
Netscreen SSG-550 - Secondary IP not advertised in OSPF [In reply to]

The easiest way to advertise the secondary IP configured on the trust
interface would be to configure a route-map which matches the trust
interface and then applying that route-map to ospf, as in the following:

set vrouter trust-vr
set route-map name "export-routes" permit 1
set match interface trust
exit
set protocol ospf
set redistribute route-map "export-routes" protocol connected

Optionally, if you want to restrict the advertisement to only the secondary
IP and nothing else, you could additionally add an access list which matches
only that IP, as in the following:

set vrouter trust-vrset access-list 1
set access-list 1 permit ip 66.66.66.1/32 10
set route-map name "export-routes" permit 1
set match interface ethernet1
set match ip 1
exit
set protocol ospf
set redistribute route-map "export-routes" protocol connected
Cheers,

Stefan Fouant
On 11/29/07, yssaitoh at networld.co.jp <yssaitoh at networld.co.jp> wrote:
>
> Hello Vincent
>
> this is saito.
>
> please let me know your configration files.
>
> would you config ospf in it collectly?
>
> I think your config not completely or anthing problem config it.
>
> thanks.
>
>
>
>
> On Thu, 29 Nov 2007 13:27:56 +0100
> Vincent De Keyzer <vincent at autempspourmoi.be> wrote:
>
> > Hello,
> >
> > I am very new to Netscreen products.
> >
> > I have configured a secondary IP address on the trusted interface of a
> > SSG-550; I can see the new subnet in the routing table (as "Connected"),
> > but it is not advertised to the OSPF neighbor.
> >
> > Am I trying something impossible? If not, how do I have to do?
> >
> > Vincent
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>

nsp juniper RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.