[c-nsp] PIX OSPF redistribution question

Karol Mares KMares at soitron.com
Fri Sep 15 12:37:08 EDT 2006


Brian,

On Fri, 2006-09-15 at 10:39 -0500, Brian Johnson wrote:
> I am looking at turning up OSPF on my redundant set of pix 515e
> firewalls and am coming across an issue.
> 
> We use NAT and are using a total of 4 interfaces (including the outside
> interface) off of the pix cluster. The outside and one of the other
> interfaces use public IP address space, but the other interfaces are
> using private space that I do not want to redistribute into OSPF. I also
> have several router statically in the system that I do not want
> re-distributed.
> 

Just use the network command for ip ranges of the interfaces that you
want to put in your OSPF domain, if you want to redistribute some static
routes also, use it with route-map, to  save some CPU cycles.

-- 
                         iso


More information about the cisco-nsp mailing list