[j-nsp] Netscreen SSG-550 - Secondary IP not advertised in OSPF

[Stefan Fouant]

The easiest way to advertise the secondary IP configured on the trust
interface would be to configure a route-map which matches the trust
interface and then applying that route-map to ospf, as in the following:

set vrouter trust-vr
set route-map name "export-routes" permit 1
set match interface trust
exit
set protocol ospf
set redistribute route-map "export-routes" protocol connected

Optionally, if you want to restrict the advertisement to only the secondary
IP and nothing else, you could additionally add an access list which matches
only that IP, as in the following:

set vrouter trust-vrset access-list 1
set access-list 1 permit ip 66.66.66.1/32 10
set route-map name "export-routes" permit 1
set match interface ethernet1
set match ip 1
exit
set protocol ospf
set redistribute route-map "export-routes" protocol connected
Cheers,

Stefan Fouant
On 11/29/07, yssaitoh at networld.co.jp <yssaitoh at networld.co.jp> wrote:
>
> Hello Vincent
>
> this is saito.
>
> please let me know your configration files.
>
> would you config ospf in it collectly?
>
> I think your config not completely or anthing problem config it.
>
> thanks.
>
>
>
>
> On Thu, 29 Nov 2007 13:27:56 +0100
> Vincent De Keyzer <vincent at autempspourmoi.be> wrote:
>
> > Hello,
> >
> > I am very new to Netscreen products.
> >
> > I have configured a secondary IP address on the trusted interface of a
> > SSG-550; I can see the new subnet in the routing table (as "Connected"),
> > but it is not advertised to the OSPF neighbor.
> >
> > Am I trying something impossible? If not, how do I have to do?
> >
> > Vincent
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>