Configuring IPv4 Route Redistribution to RIP in Gaia Clish

Important - In a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

You can configure IPv4 route redistribution in Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

To see the available "set" commands for IPv4 Route Redistribution to RIP, enter in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Clish:

set route-redistribution to rip[Esc][Esc]

To see the configured IPv4 Route Redistribution to RIP, enter in Gaia Clish:

show configuration route-redistribution[Esc][Esc]

These commands let you configure a policy for exporting routes to RIP.

Syntax to add redistribution to IPv4 RIP from - Kernel

set route-redistribution to rip from kernel

all-ipv4-routes

metric <1-16> on

off

network <IPv4 Address>/<Mask Length>

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

metric <1-16> on

off

Syntax to add redistribution to IPv4 RIP from - OSPFv2

set route-redistribution to rip from ospf2 [instance <OSPF Instance>]

all-ipv4-routes

metric <1-16> on

off

network <IPv4 Address>/<Mask Length>

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

metric <1-16> on

off

riptag {<1-65535> | default}

Syntax to add redistribution to IPv4 RIP from - OSPFv2 External

set route-redistribution to rip from ospf2ase [instance <OSPF Instance>]

all-ipv4-routes

metric <1-16> on

off

network <IPv4 Address>/<Mask Length>

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

metric <1-16> on

off

riptag {<1-65535> | default}

Syntax to add redistribution to IPv4 RIP from - BGP Based on AS-Path

set route-redistribution to rip from bgp-as-path <Regular Expression>

origin {any | IGP | EGP | incomplete}

all-ipv4-routes

metric <1-16> on

off

network <IPv4 Address>/<Mask Length>

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

metric <1-16> on

off

riptag {<1-65535> | default}

Syntax to add redistribution to IPv4 RIP from - BGP Based on AS

set route-redistribution to rip from bgp-as-number <AS Number 1-65535>

all-ipv4-routes

metric <1-16> on

off

network <IPv4 Address>/<Mask Length>

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

metric <1-16> on

off

riptag {<1-65535> | default}

Parameters

The parameters are sorted alphabetically.

Parameter

Description

action {accept | restrict}

Configures whether to accept or reject (restrict) this route.

all-ipv4-routes metric <1-16> on

Enables the redistribution of all IPv4 routes from this protocol.

all-ipv4-routes off

Disables the redistribution of all IPv4 routes from this protocol.

from aggregate {...} off

Disables redistribution of this aggregate route into RIP.

from aggregate {all-ipv4-routes | <IPv4 Address>/<Mask Length>}

Configures the IPv4 aggregate route to redistribute into RIP.

all-ipv4-routes - Causes all aggregate routes to match the rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. and be redistributed into RIP.
<IPv4 Address>/<Mask Length> - Causes only the specified route to match the rule and be redistributed into RIP.

Range: Dotted-quad ([0-255].[0-255].[0-255].[0-255] / [0-32])

Default: None

from bgp-as-number <AS Number 1-65535>

Configures the redistribution of BGP routes based on the AS Number.

from bgp-as-path <Regular Expression>

Configures the redistribution of BGP routes based on the AS-Path attribute.

A valid AS_PATH regular expression contains only digits and these special characters:

. - The period character matches any single character.
\ - The backslash character matches the character right after the backslash. For pattern recall, match the pattern indicated by the digit following the backslash. To enter the backslash character, enter two backslash characters \\ (the first backslash character escapes the second backslash character).
^ - The circumflex character matches the characters or null string at the beginning of the AS path.
$ - The dollar character matches the characters or null string at the end of the AS path.
? - The question mark matches zero or one occurrence of the pattern before "?". To enter the question mark, press the CTRL V keys and then press the Shift ? keys.
* - The asterisk character matches zero or more occurrences of the pattern before "*".
+ - The plus character matches one or more occurrences of the pattern before "+".
| - The pipeline (vertical line) character matches one of the patterns on either side of the "|" character.
_ - The underscore character matches comma (,), left brace ({), right brace (}), beginning of ASPath (^), end of ASPath ($), or a whitespace (space or tabulation).
[ ] - The square brackets match the set of characters or range of characters separated by a hyphen (-) within the brackets.
( ) - The round brackets group one or more patterns into a single pattern.
{m n} - Matches at least "m" and at most "n" repetitions of the pattern before "{m,n}". Both "m" and "n" are positive integers, and "m" is less than or equal to "n".
{m} - Matches exactly "m" repetitions of the pattern before "{m}". The "m" is a positive integer.
{m,} - Matches "m" or more repetitions of the pattern before "{m}". The "m" is a positive integer.

from interface <Name of Interface>

Configures the redistribution of all directly connected routes from the specified interface.

from interface <Name of Interface> off

Disables redistribution of routes from this interface into RIP.

from kernel

Configures the redistribution of OS kernel routes.

from ospf2 [instance <OSPF Instance>]

Configures the redistribution of IPv4 OSPFv2 routes (from the specified OSPF instance).

from ospf2ase [instance <OSPF Instance>]

Configures the redistribution of IPv4 OSPFv2 External routes (from the specified OSPF instance).

from static-route {...} off

Disables redistribution of this static route into RIP.

from static-route {all-ipv4-routes | default}

Configures the redistribution of static routes into RIP:

all-ipv4-routes - Matches all IPv4 static routes.
default - Matches the default IPv4 static route.

from nat-pool {all-ipv4-routes | <IPv4 Address>/<Mask Length>}

Configures the redistribution of NAT Pools. See NAT Pools.

all-ipv4-routes - Matches all IPv4 NAT Pools.
<IPv4 Address>/<Mask Length> - Matches only the specified IPv4 NAT Pool.

match-type exact on

Matches only routes with prefix and mask length exactly equal to the specified network.

match-type normal on

Matches any route contained within the specified network.

match-type range between <Start Mask Length> and <End Mask Length> on

Matches any route with prefix equal to the specified network, whose mask length falls within a particular range.

match-type refines on

Matches only routes that are contained within, but more specific than, the specified network. For example, with a greater mask length.

metric <1-16>

Configures the RIP metric to be added to routes redistributed through this rule.

The metric used by RIP/RIPng is a hop count, representing the distance to a destination.

Routes with higher hop counts are more expensive.

Routes with a metric greater than or equal to 16 are treated as unreachable, and are not installed or propagated to peers.

Note - When redistributing routes to RIP or RIPng, a metric must be configured.

Range: 1-16

Default: None

metric <1-16> on

Enables redistribution of routes into RIP.

network <IPv4 or IPv6 Address>/<Mask Length> metric <1-16> on

Enables redistribution of the specified network routes into RIP.

network <IPv4 or IPv6 Address>/<Mask Length> off

Disables redistribution of the specified network routes into RIP.

origin {any | IGP | EGP | incomplete}

Configures the route origin:

any - A route was learned from any protocol and the path is probably complete.
IGP - A route was learned from an interior routing protocol and the path is probably complete.
EGP - A route was learned from an exterior routing protocol that does not support AS-PATH, and the path is probably incomplete.
incomplete - The route path information is incomplete.

riptag {<1-65535> | default}

Configures a route tag field on routes redistributed to RIP through this rule

Range: 1-65535, or default

Default: No route tag

set route-redistribution to rip off

Disables all route redistribution to this protocol.

Examples

Redistribute all RIP routes for the network 192.168.0.0/16 that fall in the range between 192.168.0.0/18 and 192.168.0.0/24 into OSPF (valid for OSPFv2 only):

set route-redistribution to ospf2 from rip network 192.168.0.0/16 match-type range between 18 and 24 on

Redistribute all OSPF external routes into RIP, and assign the cost of 2 to them:

set route-redistribution to rip from ospf2ase all metric 2 on

Redistribute all OSPF external routes into RIP, and assign the RIP tag value of 20 to them:

set route-redistribution to rip from ospf2ase riptag 20

Redistribute aggregate routes for the network 1.2.0.0/16 into RIP, and assign the cost of 2 to them:

set route-redistribution to rip from aggregate 1.2.0.0/16 metric 2 on

Redistribute all routes for the network 192.168.0.0/16 from OSPF into RIP, and assign the cost of 2 to them:

set route-redistribution to rip from ospf2 network 192.168.0.0/16 metric 2 on

Redistribute all external OSPFv2 routes for the network 192.168.0.0/16 into RIP, and assign the metric of 3 to them:

set route-redistribution to rip from ospf2ase network 192.168.0.0/16 metric 3 on

Redistribute all IPv4 routes that are learned from BGP AS 100 into RIP, and assign the RIP tag value of 99 to them:

set route-redistribution to rip from bgp-aspath ^100_ origin any riptag 99

Redistribute routes for network 192.168.0.0/16 that are originated in BGP AS 100 and learned through any interior routing protocol, into RIP, and assign the cost of 10 to them:

set route-redistribution to rip from bgp-aspath _100$ origin IGP network 192.168.0.0/16 metric 10 on