problem with my VSS integration and checkpoint firewall

[hans.velez]

greetings,

I have a problem with my VSS integration with a checkpoint firewall. firewall provider says he needs two ports in aggregation on VSS, these should be in trunk mode allowing one vlan and also must establish a process to enable the firewall ospf to publish to the vss networks behind the firewall and so can be routed to the WAN. The problem is that the networks behind the firewall are not being published to the VSS nor the networks called the VSS are published to the firewall.

Adjacency is in state FULL osfp this tells us that by the routing is fine. Also leave the diagram for explanation.

[Jon Marshall · Accepted solution]

Hans

Strange that it has to be a trunk with only one vlan on it, why not a simple switchport access ?

Anyway that aside are the 2 devices in the same OSPF area ?

Could you post the config for OSPF from the VSS and the checkpoint ?

Jon

[hans.velez]

Jon,

Thanks for your ansewr. I solve it Geting down the interfaces vlan 152 And this Re-upload the ospf process on the checkpoint firewall And start to share all the routes that he knows.