Hi,
Considering the bellow scenario where i have a multilayer connecting to 2 different MPLS providers (international and local)We are receving and advertising routes via ospf to the MPLS provider. If we would like to place a firewall in between the routing segment how do i best do this? Let the firewall participate in OSPF? Most likely multiple solutions for this?
I could use IBGP and run it through the firewall, this would give me advantages of network team being in control or routing.
Another solution like this would be create a separate ospf area for the firewall and connect the isp to my backbone area using ospf virtual link. Don't think this option is that good it will work but. (in both cases I will see traffic passing the firewall.
GRE for OSPF is also an option but then all my data packets will be encapsulated(firewall has the ability to inspect encapsulated traffic).
Any other options? Or just let the firewall participate in OSPF area 0?
