Problems dynamincally routing down VPN tunnel

[fatkid]

As a test in preperation for setting things up on a larger scale, I have set up a VPN between two netscreen 5gt's that is terminated in the untrust zone on each end. I have turned on OSPF routing, but I am unable to see any routes populate between the two firewalls. If I terminate in the trust zones the routes populate. Is there something that I am missing to be able to do this from the untrust zones?

 

[Packet7]

Hello,

Did you use tunnel interfaces? If so, which VR are they bound to?

Let me know.

Rgds,

John

 

[fatkid]

Hi John,
I did use tunnel interfaces.
tunnel.1 is terminated in the untrust-vr on both firewalls.
tunnel.2 is terminated in the trust-vr on both firewalls.
When I am using tunnel.1 I dynamic ospf routing doesn't populate the routing table.
When I am going down tunnel.2 in the trust-vr dynamic ospf routing works just fine.

Bob

 

[Packet7]

Hi Bob,

Can you try tunnel.1 and post the output from:

get ike cookie
get sa
get vr untrust-vr route proto ospf detail
get vr untrust-vr route proto ospf ne
get int tun.1

Rgds,

John

 

[fatkid]

Hi John
I will do that as soon as I get another firewall back. One of mine has been used to replace a failed production firewall. I'll have another one tomorrow or the next day.

Thank you,

Bob