Configuring IPv4 Route Redistribution to OSPFv2 in Gaia Clish

Important - In a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

You can configure IPv4 route redistribution in Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

To see the available "set" commands for IPv4 Route Redistribution to OSPFv2, enter in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Clish:

set route-redistribution to ospf2[Esc][Esc]

To see the configured IPv4 Route Redistribution to OSPFv2, enter in Gaia Clish:

show configuration route-redistribution[Esc][Esc]

These commands let you configure a policy for exporting routes to OSPFv2.

Syntax to add redistribution to IPv4 OSPFv2 from - Kernel

set route-redistribution to ospf2 [instance <OSPF Instance>] from kernel

all-ipv4-routes

[metric {<1-16777215> | default}] on

off

network <IP Address>/<Mask Length>

[metric {<1-16777215> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to IPv4 OSPFv2 from - RIP

set route-redistribution to ospf2 [instance <OSPF Instance>] from rip

all-ipv4-routes

[metric {<1-16777215> | default}] on

off

network <IP Address>/<Mask Length>

[metric {<1-16777215> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to IPv4 OSPFv2 from - OSPFv2

set route-redistribution to ospf2 [instance <OSPF Instance>] from ospf2 [instance <OSPF Instance>]

all-ipv4-routes

[metric {<1-16777215> | default}] on

off

network <IP Address>/<Mask Length>

[metric {<1-16777215> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to IPv4 OSPFv2 from - OSPFv2 External

set route-redistribution to ospf2 [instance <OSPF Instance>] from ospf2ase [instance <OSPF Instance>]

all-ipv4-routes

[metric {<1-16777215> | default}] on

off

network <IP Address>/<Mask Length>

[metric {<1-16777215> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to IPv4 OSPFv2 from - BGP Based on AS-Path

set route-redistribution to ospf2 [instance <OSPF Instance>] from bgp-as-path <Regular Expression>

origin {any | IGP | EGP | incomplete}

all-ipv4-routes

[metric {<1-16777215> | default}] on

off

network <IP Address>/<Mask Length>

[metric {<1-16777215> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

ospf-automatic-tag {off | on}

ospf-automatic-tag-value {<1-4095> | default}

ospf-manual-tag-value {<1-2147483647> | default}

Syntax to add redistribution to IPv4 OSPFv2 from - BGP Based on AS

set route-redistribution to ospf2 [instance <OSPF Instance>] from bgp-as-number <AS Number>

all-ipv4-routes

[metric {<1-16777215> | default}] on

off

network <IP Address>/<Mask Length>

[metric {<1-16777215> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

ospf-automatic-tag {off | on}

ospf-automatic-tag-value {<1-4095> | default}

ospf-manual-tag-value {<1-2147483647> | default}

Parameters

The parameters are sorted alphabetically.

Parameter

Description

[metric {<1-16777215> | default}] on

Enables redistribution of routes into OSPFv2.

action {accept | restrict}

Configures whether to accept or reject (restrict) this route.

all-ipv4-routes off

Disables the redistribution of all IPv4 routes from this protocol.

all-ipv4-routes on

Enables the redistribution of all IPv4 routes from this protocol.

from aggregate {...} off

Disables redistribution of this aggregate route into OSPFv2.

from aggregate {all-ipv4-routes | <IPv4 Address>/<Mask Length>}

Configures the IPv4 aggregate route to redistribute into OSPFv2.

all-ipv4-routes - Causes all aggregate routes to match the rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. and be redistributed into OSPFv2.
<IPv4 Address>/<Mask Length> - Causes only the specified route to match the rule and be redistributed into OSPFv2.

Range: Dotted-quad ([0-255].[0-255].[0-255].[0-255] / [0-32])

Default: None

from bgp-as-number <AS Number 1-65535>

Configures the redistribution of BGP routes based on the AS Number.

from bgp-as-path <Regular Expression>

Configures the redistribution of BGP routes based on the AS-Path attribute.

A valid AS_PATH regular expression contains only digits and these special characters:

. - The period character matches any single character.
\ - The backslash character matches the character right after the backslash. For pattern recall, match the pattern indicated by the digit following the backslash. To enter the backslash character, enter two backslash characters \\ (the first backslash character escapes the second backslash character).
^ - The circumflex character matches the characters or null string at the beginning of the AS path.
$ - The dollar character matches the characters or null string at the end of the AS path.
? - The question mark matches zero or one occurrence of the pattern before "?". To enter the question mark, press the CTRL V keys and then press the Shift ? keys.
* - The asterisk character matches zero or more occurrences of the pattern before "*".
+ - The plus character matches one or more occurrences of the pattern before "+".
| - The pipeline (vertical line) character matches one of the patterns on either side of the "|" character.
_ - The underscore character matches comma (,), left brace ({), right brace (}), beginning of ASPath (^), end of ASPath ($), or a whitespace (space or tabulation).
[ ] - The square brackets match the set of characters or range of characters separated by a hyphen (-) within the brackets.
( ) - The round brackets group one or more patterns into a single pattern.
{m n} - Matches at least "m" and at most "n" repetitions of the pattern before "{m,n}". Both "m" and "n" are positive integers, and "m" is less than or equal to "n".
{m} - Matches exactly "m" repetitions of the pattern before "{m}". The "m" is a positive integer.
{m,} - Matches "m" or more repetitions of the pattern before "{m}". The "m" is a positive integer.

from interface <Name of Interface>

Configures the redistribution of all directly connected routes from the specified interface.

from interface <Name of Interface> off

Disables redistribution of routes from this interface into OSPFv2.

from kernel

Configures the redistribution of OS kernel routes.

from ospf2 [instance <OSPF Instance>]

Configures the redistribution of IPv4 OSPFv2 routes (from the specified OSPF instance).

from ospf2ase [instance <OSPF Instance>]

Configures the redistribution of IPv4 OSPFv2 External routes (from the specified OSPF instance).

from rip

Configures the redistribution of IPv4 RIP routes.

from static-route {...} off

Disables redistribution of this static route into OSPFv2.

from static-route {all-ipv4-routes | all-ipv6-routes | default | default6}

Configures the redistribution of static routes into OSPFv2:

all-ipv4-routes - Matches all IPv4 static routes.
all-ipv6-routes - Matches all IPv6 static routes.
default - Matches the default IPv4 static route.
default6 - Matches the default IPv6 static route.

from nat-pool {all-ipv4-routes | <IPv4 Address>/<Mask Length>}

Configures the redistribution of NAT Pools. See NAT Pools.

all-ipv4-routes - Matches all IPv4 NAT Pools.
<IPv4 Address>/<Mask Length> - Matches only the specified IPv4 NAT Pool.

match-type exact on

Matches only routes with prefix and mask length exactly equal to the specified network.

match-type normal on

Matches any route contained within the specified network.

match-type range between <Start Mask Length> and <End Mask Length> on

Matches any route with prefix equal to the specified network, whose mask length falls within a particular range.

match-type refines on

Matches only routes that are contained within, but more specific than, the specified network. For example, with a greater mask length.

metric {<1-16777215> | default}

Optional.

Assigns the OSPFv2 metric to be added to routes redistributed through this rule.

The metric used by OSPF is a cost, representing the overhead required (due to bandwidth) to reach a destination.

Routes with higher OSPF cost are more expensive.

Range: 1-16777215, or default

Default: No metric

network <IPv4 or IPv6 Address>/<Mask Length> off

Disables redistribution of the specified network routes into OSPFv2.

network <IPv4 or IPv6 Address>/<Mask Length> on

Enables redistribution of the specified network routes into OSPFv2.

origin {any | IGP | EGP | incomplete}

Configures the route origin:

any - A route was learned from any protocol and the path is probably complete.
IGP - A route was learned from an interior routing protocol and the path is probably complete.
EGP - A route was learned from an exterior routing protocol that does not support AS-PATH, and the path is probably incomplete.
incomplete - The route path information is incomplete.

ospf-automatic-tag-value {<1-4095> | default}

Modifies the OSPF route tag that was automatically generated based on the BGP AS.

If this value is configured, then the tag is attached to external OSPF routes upon export.

Range: 1-4095, or default

Default: No route tag

ospf-automatic-tag {off | on}

Disables (off) or enables (on) the use of an automatically generated OSPF route tag, based on the BGP AS.

If this feature is enabled, then the tag is attached to external OSPF routes upon export.

Range: off, or on

Default: off

ospf-manual-tag-value {<1-2147483647> | default}

Configures the value to place in the external OSPF route tag field.

Important - This configuration overrides any automatic tag configuration.

Range: 1-2147483647, or default

Default: No route ta

set route-redistribution to ospf2 [instance <OSPF Instance>] off

Disables all route redistribution to this protocol (for the specified OSPF instance).

Examples

Redistribute all IPv4 routes from the interface eth2 into OSPFv2:

set route-redistribution to ospf2 from interface eth2 on

Redistribute all routes from the interface eth0 into OSPFv2, and assign the metric of 50 to them:

set route-redistribution to ospf2 from interface eth0 metric 50 on

Redistribute all IPv4 routes for the IP addresses in the Autonomous System 100 into OSPF (valid for OSPFv2 only), and assign the cost of 99 to them:

set route-redistribution to ospf2 from bgp-as-number 100 all-ipv4-routes metric 99 on

Redistribute all IPv4 routes for the IP addresses in the Autonomous System 100 into OSPF (valid for OSPFv2 only), except for routes for the network 192.168.0.0/16:

set route-redistribution to ospf2 from bgp-as-number 100 network 192.168.0.0/16 action restrict

set route-redistribution to ospf2 from bgp-as-number 100 all-ipv4-routes on