topic Re: Cisco FTD static route leaking in Network Security

Cisco FTD static route leaking

BVC — Tue, 22 Jun 2021 17:35:39 GMT

I have an upcoming project that requires the configuration of a FTD, I'm new to FTD so this will be a learning curve. From the research I've done you can create static route leaking from one VRF to another VRF on the FTD, does this route leak create a static route in the routing table for each VRF that has route leaking configured? If so can you then advertise this static route out of the FTD to another device via BGP, or any other routing protocol?

Any help will be greatly appreciated.

Re: Cisco FTD static route leaking

balaji.bandi — Tue, 22 Jun 2021 23:11:03 GMT

VRF means 2 different virtual routing tables, you can leak the route one to another or GRT, Once they are in GRT, you can redistribute to the outside or other networks.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-virtual-routers.html

Re: Cisco FTD static route leaking

BVC — Wed, 23 Jun 2021 07:40:42 GMT

Hi, thank you very much for the answer. You say once they are in the GRT table they can be redistributed, is this possible for leaking between two user defined VRFs, or is this only allowed for just one user defined VRF and the global routing table?

Re: Cisco FTD static route leaking

balaji.bandi — Wed, 23 Jun 2021 11:27:11 GMT

Once they are in GRT, you can do how ever you want to ?

if you like to leak vrf to vrf, export and and import is good idea.

Re: Cisco FTD static route leaking

BVC — Wed, 23 Jun 2021 12:23:48 GMT

Okay, so I could leak from a user VRF into the GTR , then into another user VRF? Or can you leak from one user VRF into another user VRF, completely avoiding the GRT. Can you use export and import on the FTD to leak routes?

Re: Cisco FTD static route leaking

balaji.bandi — Wed, 23 Jun 2021 15:45:37 GMT

Look at the some document may help you : ( VRF Lite you can leak the route between VRF)

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/virtual-routing-for-firepower-threat-defense.html#id_99432

Re: Cisco FTD static route leaking

BVC — Wed, 23 Jun 2021 19:23:56 GMT

Ok, thank you very much for your help.