Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

In ScreenOS, redistribution of default-route from BGP into IGP is not allowed

0

0

Article ID: KB15701 KB Last Updated: 25 Nov 2009Version: 1.0
Summary:

Customer wants to redistribute a default route 0.0.0.0/0 learned from eBGP neighbor into OSPF, but a type 5 default route LSA does not exist in OSPF database.

Symptoms:
This behavior is by design of ScreenOS to avoid a potential route loop or black hole.

Solution:
To correct this situation, configure OSPF with the advertise-def-route option without the 'always' parameter. By not applying 'always', it will trigger the ScreenOS firewall to generate a default route in Type 5 LSA only as it receives a default route from eBGP neighbor.

For example:
set vr trust
set protocol ospf
> set area <area>
> set enable
> set advertise-def-route

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search