HP VPN Firewall Appliances Network Management Configuration Guide

512
* i 9.1.1.0/24 2.2.2.2 0 100 0 ?
The output shows that the route 8.1.1.0 becomes valid with the next hop as Router A.
5. Verify the configuration:
# Ping 8.1.1.1 on Router B.
[RouterB] ping 8.1.1.1
PING 8.1.1.1: 56 data bytes, press CTRL_C to break
Reply from 8.1.1.1: bytes=56 Sequence=1 ttl=254 time=2 ms
Reply from 8.1.1.1: bytes=56 Sequence=2 ttl=254 time=2 ms
Reply from 8.1.1.1: bytes=56 Sequence=3 ttl=254 time=2 ms
Reply from 8.1.1.1: bytes=56 Sequence=4 ttl=254 time=2 ms
Reply from 8.1.1.1: bytes=56 Sequence=5 ttl=254 time=2 ms
--- 8.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/2 ms
BGP and IGP synchronization configuration example
Network requirements
As shown in Figure 298, all devices of company A reside in AS 65008 while all devices of company B
reside in AS 65009. AS 65008 and AS 65009 are connected through Router A and Firewall. It is
required that Router A can access network 9.1.2.0/24 in AS 65009, and Router B can access network
8.1.1.0/24 in AS 65008.
Figure 298 Network diagram
Configuration considerations
Configure BGP to redistribute routes from OSPF on Firewall, so Router A can obtain the route to
9.1.2.0/24. Configure OSPF to redistribute routes from BGP on Firewall, so Router C can obtain the route
t o 8 .1.1.0 / 24 .
Configuration procedure
1. Configure IP addresses for interfaces. (Details not shown.)
2. Configure OSPF:
Enable OSPF in AS 65009, so Firewall can obtain the route to 9.1.2.0/24.
# Configure Firewall.
<Firewall> system-view
[Firewall] ospf 1
[Firewall-ospf-1] area 0
Router A
AS 65008
GE0/2
3.1.1.1/24
Router BFirewall
AS 65009
GE0/1
8.1.1.1/24
GE0/2
3.1.1.2/24
GE0/1
9.1.1.1/24
GE0/1
9.1.1.2/24
Loop0
1.1.1.1/32
Loop0
2.2.2.2/32
Loop0
3.3.3.3/32
EBGP OSPF
GE0/2
9.1.2.1/24