tcpdump - capture files

Scripts

touch debug_start.sh 

#!/bin/bash
tcpdump  -s 0 -enni any  host 10.115.10.11  and port '(68 or 67)' -w  /home/admin/DHCP.pcap

touch debug_stop.sh 
killall tcpdump

#!/bin/bash

./debug_start.sh 
• Keep the script running until we catch the dhcp failure
• To stop the script run the debug_stop.sh
.debug_stop.sh

Expert@myvpn:0]# ls -lt DHCP.pcap
-rw-rw---- 1 admin root 24576 Oct  8 07:46 DHCP.pcap
 
[Expert@myvpn:0]# ps -aef | grep tcpdump
pcap      1857  1855  0 07:31 pts/6    00:00:00 tcpdump -s 0 -enni any host 10.115.1.11 and port (68 or
admin    12142 12024  0 07:48 pts/6    00:00:00 grep tcpdump
[Expert@myvpn:0]#
 
 

 

vpnd monitor

#! /bin/bash
#VPND Monitor
logfile="/var/log/vpnd_monitor.txt"
interval=7

while :
do
        vpnd=`pidof vpnd`
        echo "=========================================" >> $logfile
        echo "Date : `date`" >> $logfile
        echo "PID: $vpnd" >> $logfile
        echo Visitor mode table: `fw tab -t tcpt_external_ip -s | tail -1` >> $logfile
        echo "VPND open file descriptors: `ls -la /proc/$vpnd/fd | wc -l`" >> $logfile
        echo "Top 5 memory consumers:" >> $logfile
        echo "`ps -e -orss=,args=,%mem= | sort -b -k1,1nr | head -5`" >> $logfile
        echo "" >> $logfile

        echo "Top 5 CPU consumers:" >> $logfile
        echo "`ps -e -o pcpu,cpu,args | sort -b -k1,1nr | head -5`" >> $logfile
        echo "" >> $logfile

        echo "VPND CPU/memory usage:" >> $logfile
        echo "`ps -p $vpnd -o %cpu,%mem`" >> $logfile

        echo "================================" >> $logfile
        sleep 7
done

Checkpoint Updatable Objects and Domain Objects

 

The list of Microsoft domains that will be queried from the updatable objects for Microsoft Office365:

https://endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7
 
The domains being queried are on this list. 

Requests are doubled by adding www. prefix to each query causing alot of NXDomain result. 

This can be fix this with a kernel parameter to prevent these lookups:

To prevent nxdomain set kernel add_www_prefix_to_domain_name to 0 on the fly:

fw ctl set int add_www_prefix_to_domain_name 0

And to make the change permanent (survive reboot) add a line to 

$FWDIR/boot/modules/fwkern.conf:
add_www_prefix_to_domain_name=0

And, to further reduce the queries you can consider modifying 

rad_kernel_domain_cache_refresh_interval to double it's current value. 

By doing these changes you could reduce the queries related to FQDN domain objects + updatable objects, to approximately 25% of their current level. 

R77.30 Domain Objects / R80+ Non-FQDN Domain Object

All new connections going through the rulebase, every rule with these object the Firewall will do a reverse DNS lookup for the destination IP to see if the response matches the object. This is regardless of which member is Active as the Standby can send its own traffic to be checked via the rule base.

R80+ FQDN Domain Objects
After each policy install and every 30-60 seconds after that the Firewall will perform a DNS lookup for the Domain Objects.

Updatable Objects
The Firewall will obtain a list of domains from our servers related to the service of the Updatable Object. From there all domains are treated like FQDN Domain Objects where they are checked after policy install and 30-60 seconds after that.

For both R80+ FQDN Domain Objects and Updatable Object both members will perform the check and all DNS servers configured will be queried to make sure all IPs releated to the Domain is cached for the rules. If there is no response, response is late (over 1 second), wsdnsd is problematic, or received a fault from the server then the request is made again

VPN troubleshooting Commands

 

Commands	Descriptions
vpn tu	VPN utility, allows you to rekey vpn
vpn ipafile_check ipassignment.conf detail‏	Verifies the ipassignment.conf file
dtps lic	show desktop policy license status
cpstat -f all polsrv	show status of the dtps
vpn shell	Start the VPN shell
vpn shell /tunnels/delete/IKE/peer/[peer ip]	delete IKE SA
vpn shell /tunnels/delete/IPsec/peer/[peer ip]	delete Phase 2 SA
vpn shell /show/tunnels/ike/peer/[peer ip]	show IKE SA
vpn shell /show/tunnels/ipsec/peer/[peer ip]	show Phase 2 SA
vpn shell show interface detailed [VTI name]	show VTI detail
vpn debug ikeon|ikeoff	Debug IKE into $FWDIR/log/ike.elg. Analyze ike.elg with the IKEView tool
vpn debug on|off	Debug VPN into $FWDIR/log/vpnd.elg. Analyze vpnd.elg with the IKEView tool
vpn debug trunc	Truncate and stamp logs, enable IKE & VPN debug
vpn drv stat	Show status of VPN-1 kernel module
vpn

How to Read Checkpoint VPN Ike.elg file

 

First you need to capture a vpn debug files from the firewall. The proper steps to gather a clean Ike.elg file is to force the firewall to re-negotiate the VPN tunnel. To do this you need to do the following:

1. On one for the firewalls issue the command “vpn tu or vpn tunnelutil”. This will bring up the following options:

**********     Select Option     **********

(1)             List all IKE SAs

(2)             List all IPsec SAs

(3)             List all IKE SAs for a given peer

(4)             List all IPsec SAs for a given peer

(5)             Delete all IPsec SAs for a given peer

(6)             Delete all IPsec+IKE SAs for a given peer

(7)             Delete all IPsec SAs for ALL peers

(8)             Delete all IPsec+IKE SAs for ALL peers

(A)             Abort

*******************************************

You can select either option #6 and put in the remote side Ip address or you can select option #8 and delete all the tunnels IPsec and IKE SAs. This will delete the IPsec and IKE SAs and this will send a delete IKE SA packet to the remote side telling it to take down the exciting tunnel.

2. On the local firewall issue the command “vpn debug ikeon”. This will turn on IKE debugging.
3. From either side of the firewall generate traffic through the tunnel.
4. Once the tunnel have failed issue the command “vpn debug ikeoff”.
5. Gather the ike.elg file that is in the $FWDIR/log directory on the firewall.

How to open an Ike.elg file:

1. You will need a tool called IKEView. This file is available with the INFOView tool at https://support.nokia.com/employee/tac_source/tac.jsp?f=tac_source/Software/cp_tools.html#ike_view
2. Once you have the tool open you can drag and drop the Ike.elg file into the      tool or you can use the file open and select the ike.elg file.
3. It should look at the following once opened. (Note this is a working VPN Example)

How to Read an Ike.elg:

To read an Ike.elg file you should have the understanding on the componets that are needed for an IPSec VPN. Resolution #23501 goes in depth on the componets for IPSec. For a VPN tunnel to establish there is two phases. They are know as Phase 1 “Main Mode” and Phase 2 “Quick Mode”

Phase 1:

Can either consist of 3 packets “Aggressive mode” or 6 packets “Normal mode”. Aggressive mode is quicker but is less insecure then Normal mode. Phase 1 negotiate the IPSec SA of a tunnel. A single IPSec SA can consist of multiple IKE SAs (for Phase 2). Phase 1 is the negotiation of the keys between firewalls before it goes to Phase 2.

This is an example of a completed negotiation of a Main Mode. This Ike.elg was taken off a firewall with the Ip address 10.207.107.80 going to 10.207.107.70.

The way you would read this is the part that circled in red is the Ip address of the other end of the tunnel. The part in circle in blue indicates who is negotiating the tunnel (were the traffic is coming from). Since the arrow is point to the right. This indicates that 10.207.107.80 (Local firewall from you took this ike.elg off) is making the tunnel and the traffic is going outbound.

(NOTE: <== indicates traffic inbound:  ==> indicates traffic outbound)

Since Phase 1 (Normal mode) consist of 6 packets. The first packet in the example above is sent by the local firewall “MM packet 1”.  MM represents the Main Mode packet. An example of a Main mode packet flow is as below.

The way the packets are organized in Main Mode:

Main Mode with Pre-Shared Key.

MM packet 1 Contains:          Header, Security Association (Integrity, Encryption Strengths, DH group,        

                                           IPSec lifetime

MM packet 2 Contains:          Header, Security Association (Integrity, Encryption Strengths, DH group,        

                                           IPSec lifetime

MM packet 3 Contains:          Header, DH Key Exchange, Nonce (Random number)

MM packet 4 Contains:          Header, DH Key Exchange, Nonce (Random number)

MM packet 5 Contains:          Header, ID. This is encrypted

MM packet 6 Contains:          Header, ID. This is encrypted

If the VPN fails on MM packet 5 or 6 this is normal because of a miss match of the Pre-Shared key.

Example below is an expanded MM packet 1. This shows that we are proposing (in blue) 3DES, MD5, Authentication Method= Pre-shared, DH group 2, and IPSec life of 86400.

Main Mode with Certificates.

MM packet 1 Contains:          Header, Security Association (Integrity, Encryption Strengths, DH group,        

                                           IPSec lifetime

MM packet 2 Contains:          Header, Security Association (Integrity, Encryption Strengths, DH group,        

                                           IPSec lifetime

MM packet 3 Contains:          Header, DH Key Exchange, Nonce (Random number)

MM packet 4 Contains:          Header, DH Key Exchange, Nonce (Random number), and Certificate Request

MM packet 5 Contains:          Header, ID, Certificate, Signature, and Certificate Request. This is encrypted

MM packet 6 Contains:          Header, ID, Certificate, and Signature. This is encrypted

What to check when Main Mode is failing.

The only two packets that you can really look at in Main Mode are MM packet 1 and 2. The rest are really will not provide you mush details. MM packet 1 and 2 will provide you the details on the Security Association. This consist of the proposed Integrity, Encryption Strengths, DH group and the IPSec life time. You can expand the packets in IKEView and see what each firewall is proposing. You will be able to tell what the remote firewall is proposing within the MM packet that is received from the remote side.

MM packet 3 and 4 are just the exchange in the DH key and a Nonce (Random number generated from the remote side to encrypt the data for MM packet 5 and 6). There is really noting that you can look for within here

MM packet 5 and 6 are encrypted. This is the for the exchange in the pre-shared key or the Certificate. If the VPN is failing on these two packets then you know it is a possible Pre-shared key mismatch or an invalid certificate.

Phase 2:

IPsec negotiation, or Quick Mode, is similar to an Aggressive Mode IKE negotiation, except negotiation must be protected within an IPsec SA from Phase 1. Quick Mode negotiates the SA for the data encryption and manages the key exchange for that IPsec SA. There are 4 packets used in Quick Mode. They contain all information required to maintain secure connection between two IP-based hosts. The first two packets in the exchange provide the details on the networks or host that you will be negotiating, encryption strengths, integrity, and the nonce. The last two packets are encrypted traffic. In an ike.elg you may only see three packets.

The example above the remote peer Ip address is 10.207.107.70 (In Red). The local firewall is making the negotiation to the remote peer (arrow points to the right in red indicates this). The blue is the local encryption domain (Check Point try to use the largest possible subnet). The green is the remote encryption domain (remember that Check Point try to use largest possible subnet. If the networks overlap the SA will not be negotiated).

In the example above since we are local firewall is making the connection to the remote peer. QM packet (Quick Mode-Phase 2) 1 and 3 is sent from the local firewall. QM packet 2 is send from the remote firewall.

The way Quick Mode packets are organized are as followed:

QM packet 1 Contains:      Header, Security Association (Integrity, Encryption Strengths, IPSec (IKE phase 2) lifetime, and IPSec proposal (Networks or host)

QM packet 2 Contains:      Header, Security Association (Integrity, Encryption Strengths, IPSec (IKE phase 2) lifetime, and IPSec proposal (Networks or host)

QM packet 3 Contains:           Header, Hash

QM packet 4 Contains:           Header, Hash, and Connection Notifications.

What to check when Quick Mode is failing:

Since there is only 3 or 4 packets in Quick Mode there is not too much to check. The only two packets that would do any good to look at are QM packet 1and QM packet 2. In the example above the local firewall is proposing the following:

QM packet 1 (17:47:00) - (192.168.199.8  255.255.255.248) - (192.168.198.0  255.255.255.0)

• The (192.168.199.8 255.255.255.248) is the local encryption domain and the (192.168.198.0     255.255.255.0) is what is defined as the remote side encryption domain. The remote side should match up with the same networks. If they do not you will get an error for “No Valid SA” in most cases.

• If what you are proposing is you’re outside IP address of your firewall and not what you have defined in local encryption domain this means that your firewall is nating the traffic. This is when a not nat rule is needed (unless you would like it this want and the remote side needs to have the external Ip address of your firewall defined in the remote side encryption domain.

For QM packet 2 you should see the same if the encryption domains are matched up. If you are making a connection to a Cisco, Netscreen, or a SonicWall you may see the request be made by host. In this case you will need to follow resolution #1733. This will force the local firewall to negotiate the SAs per host and not per largest possible subnet.

Checkpoint R80.40 - Select Feature of Interest

R80.40  - Select Feature of Interest

• RAD  - Resource Advisor  (Process Improvement) 
• Remote Access - Machine Certificate Authentication
• Identity Awareness - Integration with  SAML 2.0  & 3rd Party Identity Provider
• TSL Inspection Layer
• ClusterXL Active-Active Cluster Mode
• ClusterXL dynamic Split
• CPView Enhancements
• IoT Security 
• Central Deployment Tool - Phase 1
• Multi Domain Management  Restore & Migrate
• Remote Access Portal Agent with new CShell

SMART TASKS

Extend Management capabilities  and openness by allowing to automatically react to Management operations and Security events

Streamlined execution of management operational tasks and challenges.

Improve security by automating the activities between different device components and Decrease response times to security events.

R80.30 ClusterXL

[Expert@myfirewall-fwa:0]# clusterXL_admin down

This command does not survive reboot. To make the change permanent, run either the 'set cluster member admin {down|up} permanent' command in Gaia Clish, or

the 'clusterXL_admin {down|up} -p' command in Expert mode

Setting member to administratively down state ...

Member current state is DOWN

 

[Expert@myfirewall-fwa:0]# clusterXL_admin up 

This command does not survive reboot. To make the change permanent, run either the 'set cluster member admin {down|up} permanent' command in Gaia Clish, or the 'clusterXL_admin {down|up} -p' command in Expert mode

Setting member to normal operation ...

Member current state is STANDBY

[Expert@myfirewall-fwa:0]#

IPSec VPN Troubleshooting

If using Endpoint Security VPN

1. What Endpoint Security VPN client version are you using?
2. What are the client OS's and versions?
3. What is the public IP of the gateway?
4. What is the client's public IP and office mode IP?  (IPChicken.com will give you your public IP and ipconfig will give you the office mode IP on the checkpoint interface).
5. What is the clients username?

To troubleshoot this issue please Enable client logging on a client machine that is having issues.

1. Right click the Yellow/Green Lock icon from your quick launch menu 
2. Select VPN Options, a new window appears 
3. Click on the "Advanced" tab 
4. Click "Enable Logging"
5. Keep the dialog box open

Also, we will need to collect some debugs from the gateway.  From expert mode on the gateway involved.
 #vpn debug trunc
 #vpn debug on TDERROR_ALL_ALL=5
 
 -wait for issue to replicate
 #vpn debug trunc off 
 #vpn debug on TDERROR_ALL_ALL=0
 
 -provide the following for analysis: (Use a program like winSCP.  You may need to change the shell (chsh -s /bin/bash) echo $FWDIR (for file path to $FWDIR/log/))
    $FWDIR/log/ike.elg*
    $FWDIR/log/vpnd.elg*

 -on the client click on collect logs.   Once the files are displayed, back up one directory, this is the cab file we will need.
 -uncheck Enable Logging

If using SNX with mobile access

What is the client's public IP and office mode IP?  (IPChicken.com will give you your public IP and ipconfig will give you the office mode IP on the checkpoint interface).
What is the clients username?

Follow the procedure in sk103572  for client side debugs.
Additionally run the gateway debugs
#cvpnd_admin debug set TDERROR_ALL_ALL=5
#vpn debug trunc
#vpn debug on TDERROR_ALL_ALL=5

to stop:
#cvpnd_admin debug off
#vpn debug trunc off
#vpn debug on TDERROR_ALL_ALL=0

-in addition to the client logs provide the following for analysis:
$CVPNDIR/log/cvpnd.elg*
$FWDIR/log/ike.elg*
$FWDIR/log/vpnd.elg*

How many uss are on IPSec VPN

fw tab -t userc_key -s

cphaprob stat

cpview

Route Redistribution in Gaia Clish. - IPv4 and IPv6 route

Configuring Route Redistribution - Gaia Clish

You can configure IPv4 and IPv6 route redistribution in Gaia Clish.

Redistributing IPv4 Routes

To configure IPv4 route redistribution:

set route-redistribution to <destination_protocol> <destination_protocol_parameters> from <source_protocol> <source_protocol_parameters>

These are the destination protocols:

• BGP
• OSPFv2
• RIP

Each destination protocol has a set of destination protocol parameters.

These are the source protocols:

• BGP, specific AS
• BGP, specific AS path
• OSPFv2
• OSPFv2 External
• RIP

You can also redistribute:

• Aggregate routes
• Default routes
• Routes from specific interfaces
• Static routes

Redistributing IPv4 Routes to BGP

Destination protocol - BGP:

bgp-as <peer_group> community-append <community_ID> [as <AS_number> | off] community-match <community_ID> [as <AS_number> | off] localpref <preference> med <MED>

Parameters

Parameter	Description
bgp-as <peer_group>	Destination BGP Autonomous System (AS).
community-append <community_ID>	The ID of the community appended to the route. Valid community ID values are 1 through 65535.
community-match <community_ID>	The ID of the community to route. Valid community ID values are 1 through 65535.
as <AS_number> | off	Turn the specified community-AS association on (as <AS_number>) or off (off)
localpref <preference>	Assign a BGP local preference to routes redistributed into the destination BGP AS. Valid preference values are 0 through 2147483647. The default is none. If selected, it leaves the BGP local preference value of the source BGP AS routes.
med <MED>	Assign a Multi Exit Discriminator (MED). The routes with the lowest MED are preferred.

Examples:

• Redistribute all the static routes into the BGP AS 11:
  set route-redistribution to bgp-as 11 from static-route all-ipv4-routes on
• Assign the BGP local preference of 100 to routes redistributed into BGP AS 11:
  set route-redistribution to bgp-as 11 localpref 100

Redistributing IPv4 Routes from BGP Specific AS

Source protocol - BGP, specific AS:

bgp-as-number <AS_number> all-ipv4-routes metric <cost> on off on network <IPv4_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on ospf-automatic-tag {on | off} ospf-automatic-tag-value {default | <value>} ospf-manual-tag-value {default | <value>} riptag {default | <value>}

Parameters

Parameter	Description
bgp-as-number <AS_number>	BGP Autonomous System number from which to redistribute routes into the destination routing protocol.
all-ipv4-routes {metric <cost> on | off | on}	Redistribute all the BGP routes from the specified BGP AS. The options for redistribution of all IPv4 routes are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a route redistribution cost that is in a valid for the destination protocol range: RIP - 1-16 OSPFv2 - 1-16777215 BGP - 1-4294967295 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
network <IPv4_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the BGP routes to the specified network in the specified BGP AS, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) range - Matches routes that fall within the specified range in the network (the lower limit for the mask length must not be lower than the network mask length) refines - Matches routes within the network, not including the network route itself Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 OSPFv2 - 1-16777215 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
ospf-automatic-tag {on | off}	Generate tags for external OSPF routes, based on the BGP AS (optional): on - Turn the tag generation on off - Turn the tag generation off
ospf-automatic-tag-value {default | <value>}	Assign a specific value to the automatic tag for the external OSPF routes (optional). Valid tag values are 1 through 4095.
ospf-manual-tag-value {default | <value>	Assign a tag value for the external OSPF routes (optional). This tag overrides all automatic tag configurations. Valid tag values are 1 through 2147483647.
riptag <value>	Assign a tag value to a BGP route redistributed into RIP. Valid tag values are 1 through 65535.

Examples:

• Redistribute all IPv4 routes for the IP addresses in the Autonomous System 100 into OSPF (valid for OSPFv2 only), and assign the cost of 99 to them:
  set route-redistribution to ospf2 from bgp-as-number 100 all-ipv4-routes metric 99 on
• Redistribute all IPv4 routes for the IP addresses in the Autonomous System 100 into OSPF (valid for OSPFv2 only), except for routes for the network 192.168.0.0/16:
  set route-redistribution to ospf2 from bgp-as-number 100 network 192.168.0.0/16 action restrict
  set route-redistribution to ospf2 from bgp-as-number 100 all-ipv4-routes on

Redistributing IPv4 Routes from BGP Specific AS Path

Source protocol - BGP, specific AS path:

bgp-aspath <AS_Path_regexp> origin {any | IGP | EGP | incomplete} all-ipv4-routes metric <cost> on off on network <IPv4_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on ospf-automatic-tag {on | off} ospf-automatic-tag-value {default | <value>} ospf-manual-tag-value {default | <value>} riptag {default | <value>}

Parameters

Parameter	Description
<AS_Path_regexp>>	AS Path, defined through a regular expression. An AS-Path regular expression consists of one or more term-operator pairs. Each term identifies one or more of the Autonomous Systems, and each operator specifies the matching criteria for the corresponding term. An AS-Path Regular Expression term can be defined through single AS numbers and groups of AS numbers. These are the AS-Path Regular Expression operators: . - Matches any single character \ - Matches the character right after the backslash (to enter \ in CLI, type another \ immediately after the first one) ^ - Matches the characters or a null string at the beginning of an AS path $ - Matches the characters or a null string at the end of an AS path ? - Matches zero or one occurrence of the preceding term (to enter ? in CLI, hit Ctrl-V, then type ?) * - Matches zero or more occurrences of the preceding term + - Matches one or more occurrences of the preceding term | - Matches one of the terms on either side of the "|" character _ - Matches a non-alphanumeric character (",", "{", "}", "^", "$") or a whitespace [] - Matches a term in a set of terms (separated by whitespaces) or a range of terms (separated by a hyphen) () - Matches a group of terms as a single term {m,n} - Matches at least m and at most n repetitions of the preceding term {m} - Matches exactly m repetitions of the preceding term {m,} - Matches m or more repetitions of the preceding term
origin {any | IGP | EGP | incomplete}	The origin of the route: any - Any origin - IGP or EGP IGP - The route was learned from an interior routing protocol (IGP), and the AS-Path information is probably complete EGP - The route was learned from an exterior routing protocol (EGP) that does not support AS-Path, and the AS-Path information is probably incomplete incomplete - The AS-Path information is incomplete Routes from IGPs are preferred over routes from EGPs, and routes from EGPs are preferred over routes with incomplete AS paths.
all-ipv4-routes {metric <cost> on | on | off}	Redistribute all the BGP routes that match this BGP AS Path. The options for redistribution of all routes are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 OSPFv2 - 1-16777215 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
network <IPv4_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the BGP routes to the specified network that match this BGP AS Path, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) range - Matches routes that fall within the specified range in the network (the lower limit for the mask length must not be lower than the network mask length) refines - Matches routes within the network, not including the network route itself Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 OSPFv2 - 1-16777215 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
ospf-automatic-tag {on | off}	Generate tags for external OSPF routes, based on the BGP AS (optional): on - Turn the tag generation on off - Turn the tag generation off
ospf-automatic-tag-value {default | <value>}	Assign a specific value to the automatic tag for the external OSPF routes (optional). Valid values are 1 through 4095.
ospf-manual-tag-value {default | <value>	Assign a tag value for the external OSPF routes (optional). This tag overrides all automatic tag configurations. Valid tag values are 1 through 2147483647.
riptag <value>	Assign a tag value to a BGP route redistributed into RIP. Valid tag values are 1 through 65535.

Examples:

• Redistribute all IPv4 routes that are learned from BGP AS 100 into RIP, and assign the RIP tag value of 99 to them:
  set route-redistribution to rip from bgp-aspath ^100_ origin any riptag 99
• Redistribute routes for network 192.168.0.0/16 that are originated in BGP AS 100 and learned through any interior routing protocol, into RIP, and assign the cost of 10 to them:
  set route-redistribution to rip from bgp-aspath _100$ origin IGP network 192.168.0.0/16 metric 10 on

Redistributing IPv4 Routes to OSPFv2

Destination protocol - OSPFv2:

ospf2

Parameters

There are no protocol options for redistribution into OSPFv2.

Example:

Redistribute all routes from the interface eth0 into OSPFv2, and assign the metric of 50 to them:

set route-redistribution to ospf2 from interface eth0 metric 50 on

Redistributing IPv4 Routes from OSPFv2

Source protocol - OSPFv2:

ospf2 all metric <cost> on off on network <IPv4_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on

Parameters

Parameter	Description
all {metric <cost> on | on | off}	Redistribute all the OSPFv2 routes. The options for redistribution of all routes are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a route redistribution cost that is in a valid for the destination protocol range: RIP - 1-16 BGP - 1-4294967295 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
network <IPv4_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the OSPFv2 routes to the specified network, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) range - Matches routes that fall within the specified range in the network (the lower limit for the mask length must not be lower than the network mask length) refines - Matches routes within the network, not including the network route itself Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 BGP - 1-4294967295 Note - Route cost assignment is mandatory when configuring redistribution into RIP.

Example:

Redistribute all routes for the network 192.168.0.0/16 from OSPF into RIP, and assign the cost of 2 to them:

set route-redistribution to rip from ospf2 network 192.168.0.0/16 metric 2 on

Redistributing IPv4 Routes from OSPFv2 ASE

Source protocol - OSPFv2 Autonomous System External:

ospf2ase all metric <cost> on off on network <IPv4_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on riptag {default | <value>}

Parameters

Parameter	Description
all {metric <cost> on | on | off}	Redistribute all the OSPFv2 External routes. The options for redistribution of all routes are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 BGP - 1-4294967295 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
network <IPv4_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the OSPFv2 External routes to the specified network, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) range - Matches routes that fall within the specified range in the network (the lower limit for the mask length must not be lower than the network mask length) refines - Matches routes within the network, not including the network route itself Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 BGP - 1-4294967295 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
riptag <value>	Assign a tag value to an OSPFv2 External route redistributed into RIP. Valid tag values are 1 through 65535.

Examples:

• Redistribute all OSPF external routes into RIP, and assign the cost of 2 to them:
  set route-redistribution to rip from ospf2ase all metric 2 on
• Redistribute all OSPF external routes into RIP, and assign the RIP tag value of 20 to them:
  set route-redistribution to rip from ospf2ase riptag 20

Redistributing IPv4 Routes to RIP

Destination protocol - RIP:

rip

Parameters

There are no protocol options for redistribution into RIP.

Example:

Redistribute all external OSPFv2 routes for the network 192.168.0.0/16 into RIP, and assign the metric of 3 to them:

set route-redistribution to rip from ospf2ase network 192.168.0.0/16 metric 3 on

Redistributing IPv4 Routes from RIP

Source protocol - RIP:

rip all metric <cost> on off on network <IPv4_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on

Parameters

Parameter	Description
all {metric <cost> on | on | off}	Redistribute all the RIP routes. The options for redistribution of all routes are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a value that is in a valid for the destination protocol range: OSPFv2 - 1-16777215 BGP - 1-4294967295
network <IPv4_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the RIP routes to the specified network, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) range - Matches routes that fall within the specified range in the network (the lower limit for the mask length must not be lower than the network mask length) refines - Matches routes within the network, not including the network route itself Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: OSPFv2 - 1-16777215 BGP - 1-4294967295

Example:

Redistribute all RIP routes for the network 192.168.0.0/16 that fall in the range between 192.168.0.0/18 and 192.168.0.0/24 into OSPF (valid for OSPFv2 only):

set route-redistribution to ospf2 from rip network 192.168.0.0/16 match-type range between 18 and 24 on

Redistributing IPv4 Routes from Default Route

Source protocol - default route:

The destination protocol must be BGP.

default-origin all-ipv4-routes {metric <cost> on | off}

Parameters

Parameter	Description
all-ipv4-routes {metric <cost> on | on | off}	Redistribute the default route. The options for redistribution of the default route are: metric <cost> on - Assign a cost in the range of 1-4294967295 to the redistributed default route and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off

Example:

Redistribute all IPv4 default routes into BGP AS 100, and assign the cost of 10 to them.

set route-redistribution to bgp-as 100 from default-origin all-ipv4-routes metric 10 on

Redistributing IPv4 Routes from Static Routes

Source - static routes:

static-route {all | default} metric <cost> on off on

Parameters

Parameter	Description
static {all | default}	IPv4 static routes to redistribute into the destination routing protocol. Valid options are: default - Default static route all - All static routes
metric <cost> on	Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: RIP - 1-16 OSPFv2 - 1-16777215 BGP - 1-4294967295 Note - Route cost assignment is mandatory when configuring redistribution into RIP.
on	Turn the redistribution on
off	Turn the redistribution off

Example:

Redistribute all IPv4 static routes into BGP AS 100, and assign the cost of 1 to them.

set route-redistribution to bgp-as 100 from static-route all metric 1 on

Redistributing IPv4 Routes from Specific Interface

Source - specific interface:

interface {all | <interface1> | <interface2> | <interfaceN>} metric <cost> on off on

Parameters

Parameter

Description

{all | <interface1> | <interface2> | <interfaceN>} {metric <cost> on | on | off}

Redistribute routes from the specified interfaces. The interface options are: all - all interfaces <interface#> - specific interface The options for redistribution are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a route redistribution cost that is in a valid for the destination protocol range: RIP - 1-16 OSPFv2 - 1-16777215 BGP - 1-4294967295

Example:

Redistribute all IPv4 routes from the interface eth2 into OSPFv2:

set route-redistribution to ospf2 from interface eth2 on

Redistributing IPv4 Routes from Aggregate

Source - aggregate routes:

aggregate {all-ipv4-routes | <IPv4_address/mask>} metric <cost> on off on

Parameters

Parameter	Description
aggregate {all-ipv4-routes | <IPv4_address/mask>}	IPv4 aggregate routes to redistribute into the destination routing protocol. Valid options are: <IPv4_address/mask> - Aggregate routes to the specified network all-ipv4-routes - All aggregate routes
metric <cost> on	The cost of the redistributed routes in the destination routing protocol: RIP - a number in the range 1-16 OSPFv2 - a number in the range 1-16777215 BGP - a number in the range 1-4294967295 Note - this parameter is mandatory when configuring redistribution into RIP.
on	Turn the redistribution on
off	Turn the redistribution off

Example:

Redistribute aggregate routes for the network 1.2.0.0/16 into RIP, and assign the cost of 2 to them:

set route-redistribution to rip from aggregate 1.2.0.0/16 metric 2 on

Redistributing IPv6 Routes

To configure IPv6 route redistribution:

set ipv6 route-redistribution to <destination_protocol> {from <source protocol> <source protocol parameters> | off}

These are the destination protocols:

• OSPFv3
• RIPng

Each destination protocol has a set of destination protocol parameters.

These are the source protocols:

• BGP
• OSPFv3
• OSPFv3 External
• RIPng

You can also redistribute:

• Routes from specific interfaces
• Static routes

Redistributing IPv6 Routes from OSPFv3

Source protocol - OSPFv3:

ospf3 all {metric <cost> on off on network <IPv6_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on

Parameters

Parameter	Description
all {metric <cost> on | on | off}	Redistribute all the OSPFv3 routes. The options for redistribution of all routes are: metric <cost> on - Assign a cost in the range of 1-16 to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Note - Route cost assignment is mandatory when configuring redistribution into RIP.
network <IPv6_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the OSPFv3 routes to the specified network, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) refines - Matches routes within the network, not including the network route itself Assign a cost in the range of 1-16 to the redistributed routes. Note - Route cost assignment is mandatory when configuring redistribution into RIP.

Example:

Redistribute all routes for the network fd14:8502:5b14:456a::/64 from OSPFv3 into RIPng, and assign the cost of 999 to them:

set ipv6 route-redistribution to ripng from ospf3 network fd14:8502:5b14:456a::/64 metric 999 on

Redistributing IPv6 Routes from OSPFv3 ASE

Source protocol - OSPFv3 Autonomous System External:

ospf3ase all metric <cost> on off on network <IPv6_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on

Parameters

Parameter	Description
all {metric <cost> on | on | off}	Redistribute all the OSPFv3 External routes. The options for redistribution of all routes are: metric <cost> on - Assign a cost in the range of 1-16 to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Note - Route cost assignment is mandatory when configuring redistribution into RIP.
network <IPv6_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the OSPFv3 External routes to the specified network, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) refines - Matches routes within the network, not including the network route itself Assign a cost in the range of 1-16 to the redistributed routes. Note - Route cost assignment is mandatory when configuring redistribution into RIP.

Examples:

• Redistribute all OSPFv3 External routes into RIPng, and assign the cost of 22 to them:
  set ipv6 route-redistribution to ripng from ospf3ase all metric 22 on
• Do not redistribute routes for the network fd14:8502:5b14:456a::/64 from OSPFv3 External into RIPng:
  set ipv6 route-redistribution to ripng from ospf3ase network fd14:8502:5b14:456a::/64 action restrict

Redistributing IPv6 Routes from RIPng

Source protocol - RIPng:

rip all metric <cost> on off on network <IPv6_address/mask> action {accept | restrict} match-type exact on normal on range between <lower_IP> and <upper_IP> on refines on metric <cost> on off on

Parameters

Parameter	Description
all {metric <cost> on | on | off}	Redistribute all the RIPng routes. The options for redistribution of all routes are: metric <cost> on - Assign a cost in the range of 1-16777215 to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off
network <IPv6_address/mask> {action <action> | match-type <precision> on | metric <cost> on | on | off}	Redistribute the RIPng routes to the specified network, unless a more specific route redistribution rule exists. Specify an <action> to accept or reject the network routes: accept - Redistribute the routes restrict - Do not redistribute the routes Specify the <precision> with which the routes are matched: exact - Matches only routes to the network normal - Matches routes within the network, including the network route itself (default) refines - Matches routes within the network, not including the network route itself Assign a cost in the range of 1-16777215 to the redistributed routes.

Example:

Redistribute all RIPng routes for the network fd14:8502:5b14:456a::/64, including the routes for the addresses within the network into OSPFv3:

set ipv6 route-redistribution to ospf3 from rip network fd14:8502:5b14:456a::/64 match-type normal on

Redistributing IPv6 Routes from Static Routes

Source - static routes:

static-route {all | default} metric <cost> on off on

Parameters

Parameter	Description
static-route {all | default}	IPv6 static routes to redistribute into the destination routing protocol. Valid options are: default - Default static route all - All static routes
metric <cost> on	Assign a cost to redistributed routes - <cost>. Make sure to assign a value that is in a valid for the destination protocol range: RIPng - 1-16 OSPFv3 - 1-16777215 Note - Route cost assignment is mandatory when configuring redistribution into RIP.

Example:

Redistribute the default IPv6 static route into OSPFv3, and assign the cost of 15000 to it:

set route-redistribution to ospf3 from static-route default metric 15000 on

Redistributing IPv6 Routes from Specific Interface

Source - specific interface:

interface {all | <interface1> | <interface2> | <interfaceN>} metric <cost> on off on

Parameters

Parameter

Description

{all | <interface1> | <interface2> | <interfaceN>} {metric <cost> on | on | off}

Redistribute routes from the specified interfaces. The interface options are: all - all interfaces <interface#> - specific interface The options for redistribution are: metric <cost> on - Assign a cost to the redistributed routes and turn the redistribution on on - Turn the redistribution on off - Turn the redistribution off Make sure to assign a route redistribution cost that is in a valid for the destination protocol range: RIPng - 1-16 OSPFv3 - 1-16777215

Example:

Redistribute all IPv6 routes from the interface eth0 into OSPFv3 and assign the cost of 10 to them:

set ipv6 route-redistribution to ospf3 from interface eth0 metric 10 on

Route Redistribution commands summary

SET commands:

Note - Enter set route-redistribution [Esc][Esc].

set route-redistribution to bgp-as VALUE community-append VALUE as VALUE off set route-redistribution to bgp-as VALUE community-append VALUE as VALUE on set route-redistribution to bgp-as VALUE community-match VALUE as VALUE off set route-redistribution to bgp-as VALUE community-match VALUE as VALUE on set route-redistribution to bgp-as VALUE from aggregate VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from aggregate VALUE off set route-redistribution to bgp-as VALUE from bgp-as-number VALUE all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE all-ipv4-routes off set route-redistribution to bgp-as VALUE from bgp-as-number VALUE all-ipv6-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE all-ipv6-routes off set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE action VALUE set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE match-type exact on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE match-type normal on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE match-type range between VALUE and VALUE on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE match-type refines on set route-redistribution to bgp-as VALUE from bgp-as-number VALUE network VALUE off set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE all-ipv4-routes off set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE all-ipv6-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE all-ipv6-routes off set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE action VALUE set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE match-type exact on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE match-type normal on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE match-type range between VALUE and VALUE on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE match-type refines on set route-redistribution to bgp-as VALUE from bgp-as-path VALUE origin VALUE network VALUE off set route-redistribution to bgp-as VALUE from default-origin all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from default-origin all-ipv4-routes off set route-redistribution to bgp-as VALUE from interface VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from interface VALUE off set route-redistribution to bgp-as VALUE from kernel all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from kernel all-ipv4-routes off set route-redistribution to bgp-as VALUE from kernel all-ipv6-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from kernel all-ipv6-routes off set route-redistribution to bgp-as VALUE from kernel network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from kernel network VALUE action VALUE set route-redistribution to bgp-as VALUE from kernel network VALUE match-type exact on set route-redistribution to bgp-as VALUE from kernel network VALUE match-type normal on set route-redistribution to bgp-as VALUE from kernel network VALUE match-type range between VALUE and VALUE on set route-redistribution to bgp-as VALUE from kernel network VALUE match-type refines on set route-redistribution to bgp-as VALUE from kernel network VALUE off set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] all-ipv4-routes off set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE action VALUE set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE match-type exact on set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE match-type normal on set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE match-type range between VALUE and VALUE on set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE match-type refines on set route-redistribution to bgp-as VALUE from ospf2 [ instance VALUE ] network VALUE off set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] all-ipv4-routes off set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE action VALUE set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE match-type exact on set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE match-type normal on set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE match-type range between VALUE and VALUE on set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE match-type refines on set route-redistribution to bgp-as VALUE from ospf2ase [ instance VALUE ] network VALUE off set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] all-ipv6-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] all-ipv6-routes off set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] network VALUE action VALUE set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] network VALUE match-type exact on set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] network VALUE match-type normal on set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] network VALUE match-type refines on set route-redistribution to bgp-as VALUE from ospf3 [ instance VALUE ] network VALUE off set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] all-ipv6-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] all-ipv6-routes off set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] network VALUE action VALUE set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] network VALUE match-type exact on set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] network VALUE match-type normal on set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] network VALUE match-type refines on set route-redistribution to bgp-as VALUE from ospf3ase [ instance VALUE ] network VALUE off set route-redistribution to bgp-as VALUE from rip all-ipv4-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from rip all-ipv4-routes off set route-redistribution to bgp-as VALUE from rip network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from rip network VALUE action VALUE set route-redistribution to bgp-as VALUE from rip network VALUE match-type exact on set route-redistribution to bgp-as VALUE from rip network VALUE match-type normal on set route-redistribution to bgp-as VALUE from rip network VALUE match-type range between VALUE and VALUE on set route-redistribution to bgp-as VALUE from rip network VALUE match-type refines on set route-redistribution to bgp-as VALUE from rip network VALUE off set route-redistribution to bgp-as VALUE from ripng all-ipv6-routes [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ripng all-ipv6-routes off set route-redistribution to bgp-as VALUE from ripng network VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from ripng network VALUE action VALUE set route-redistribution to bgp-as VALUE from ripng network VALUE match-type exact on set route-redistribution to bgp-as VALUE from ripng network VALUE match-type normal on set route-redistribution to bgp-as VALUE from ripng network VALUE match-type refines on set route-redistribution to bgp-as VALUE from ripng network VALUE off set route-redistribution to bgp-as VALUE from static-route VALUE [ metric VALUE ] on set route-redistribution to bgp-as VALUE from static-route VALUE off set route-redistribution to bgp-as VALUE localpref VALUE set route-redistribution to bgp-as VALUE med VALUE set route-redistribution to bgp-as VALUE off set route-redistribution to ospf2 [ instance VALUE ] from aggregate VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from aggregate VALUE off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE all-ipv4-routes [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE all-ipv4-routes off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE action VALUE set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type exact on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type normal on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type range between VALUE and VALUE on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type refines on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE network VALUE off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE ospf-automatic-tag off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE ospf-automatic-tag on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE ospf-automatic-tag-value VALUE set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-number VALUE ospf-manual-tag-value VALUE set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE all-ipv4-routes [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE all-ipv4-routes off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE action VALUE set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type exact on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type normal on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type range between VALUE and VALUE on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type refines on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE ospf-automatic-tag off set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE ospf-automatic-tag on set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE ospf-automatic-tag-value VALUE set route-redistribution to ospf2 [ instance VALUE ] from bgp-as-path VALUE origin VALUE ospf-manual-tag-value VALUE set route-redistribution to ospf2 [ instance VALUE ] from interface VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from interface VALUE off set route-redistribution to ospf2 [ instance VALUE ] from kernel all-ipv4-routes [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from kernel all-ipv4-routes off set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE action VALUE set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE match-type exact on set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE match-type normal on set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE match-type range between VALUE and VALUE on set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE match-type refines on set route-redistribution to ospf2 [ instance VALUE ] from kernel network VALUE off set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] all-ipv4-routes [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] all-ipv4-routes off set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE action VALUE set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE match-type exact on set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE match-type normal on set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE match-type range between VALUE and VALUE on set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE match-type refines on set route-redistribution to ospf2 [ instance VALUE ] from ospf2 [ instance VALUE ] network VALUE off set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] all-ipv4-routes [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] all-ipv4-routes off set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE action VALUE set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE match-type exact on set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE match-type normal on set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE match-type range between VALUE and VALUE on set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE match-type refines on set route-redistribution to ospf2 [ instance VALUE ] from ospf2ase [ instance VALUE ] network VALUE off set route-redistribution to ospf2 [ instance VALUE ] from rip all-ipv4-routes [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from rip all-ipv4-routes off set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE action VALUE set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE match-type exact on set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE match-type normal on set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE match-type range between VALUE and VALUE on set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE match-type refines on set route-redistribution to ospf2 [ instance VALUE ] from rip network VALUE off set route-redistribution to ospf2 [ instance VALUE ] from static-route VALUE [ metric VALUE ] on set route-redistribution to ospf2 [ instance VALUE ] from static-route VALUE off set route-redistribution to ospf2 [ instance VALUE ] off set route-redistribution to ospf2 off set route-redistribution to rip from aggregate VALUE metric VALUE on set route-redistribution to rip from aggregate VALUE off set route-redistribution to rip from bgp-as-number VALUE all-ipv4-routes metric VALUE on set route-redistribution to rip from bgp-as-number VALUE all-ipv4-routes off set route-redistribution to rip from bgp-as-number VALUE network VALUE action VALUE set route-redistribution to rip from bgp-as-number VALUE network VALUE match-type exact on set route-redistribution to rip from bgp-as-number VALUE network VALUE match-type normal on set route-redistribution to rip from bgp-as-number VALUE network VALUE match-type range between VALUE and VALUE on set route-redistribution to rip from bgp-as-number VALUE network VALUE match-type refines on set route-redistribution to rip from bgp-as-number VALUE network VALUE metric VALUE on set route-redistribution to rip from bgp-as-number VALUE network VALUE off set route-redistribution to rip from bgp-as-number VALUE riptag VALUE set route-redistribution to rip from bgp-as-path VALUE origin VALUE all-ipv4-routes metric VALUE on set route-redistribution to rip from bgp-as-path VALUE origin VALUE all-ipv4-routes off set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE action VALUE set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE match-type exact on set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE match-type normal on set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE match-type range between VALUE and VALUE on set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE match-type refines on set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE metric VALUE on set route-redistribution to rip from bgp-as-path VALUE origin VALUE network VALUE off set route-redistribution to rip from bgp-as-path VALUE origin VALUE riptag VALUE set route-redistribution to rip from interface VALUE [ metric VALUE ] on set route-redistribution to rip from interface VALUE off set route-redistribution to rip from kernel all-ipv4-routes metric VALUE on set route-redistribution to rip from kernel all-ipv4-routes off set route-redistribution to rip from kernel network VALUE action VALUE set route-redistribution to rip from kernel network VALUE match-type exact on set route-redistribution to rip from kernel network VALUE match-type normal on set route-redistribution to rip from kernel network VALUE match-type range between VALUE and VALUE on set route-redistribution to rip from kernel network VALUE match-type refines on set route-redistribution to rip from kernel network VALUE metric VALUE on set route-redistribution to rip from kernel network VALUE off set route-redistribution to rip from ospf2 [ instance VALUE ] all-ipv4-routes metric VALUE on set route-redistribution to rip from ospf2 [ instance VALUE ] all-ipv4-routes off set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE action VALUE set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE match-type exact on set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE match-type normal on set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE match-type range between VALUE and VALUE on set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE match-type refines on set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE metric VALUE on set route-redistribution to rip from ospf2 [ instance VALUE ] network VALUE off set route-redistribution to rip from ospf2 [ instance VALUE ] riptag VALUE set route-redistribution to rip from ospf2ase [ instance VALUE ] all-ipv4-routes metric VALUE on set route-redistribution to rip from ospf2ase [ instance VALUE ] all-ipv4-routes off set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE action VALUE set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE match-type exact on set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE match-type normal on set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE match-type range between VALUE and VALUE on set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE match-type refines on set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE metric VALUE on set route-redistribution to rip from ospf2ase [ instance VALUE ] network VALUE off set route-redistribution to rip from ospf2ase [ instance VALUE ] riptag VALUE set route-redistribution to rip from static-route VALUE metric VALUE on set route-redistribution to rip from static-route VALUE off set route-redistribution to rip off

SET commands for IPv6:

Note - Enter set ipv6 route-redistribution [Esc][Esc].

set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE all-ipv6-routes [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE all-ipv6-routes off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE network VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE network VALUE action VALUE set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type exact on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type normal on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE network VALUE match-type refines on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-number VALUE network VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE all-ipv6-routes [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE all-ipv6-routes off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE action VALUE set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type exact on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type normal on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE match-type refines on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from bgp-as-path VALUE origin VALUE network VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from interface VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from interface VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel all-ipv6-routes [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel all-ipv6-routes off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel network VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel network VALUE action VALUE set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel network VALUE match-type exact on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel network VALUE match-type normal on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel network VALUE match-type refines on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from kernel network VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] all-ipv6-routes [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] all-ipv6-routes off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] network VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] network VALUE action VALUE set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] network VALUE match-type exact on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] network VALUE match-type normal on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] network VALUE match-type refines on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3 [ instance VALUE ] network VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] all-ipv6-routes [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] all-ipv6-routes off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] network VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] network VALUE action VALUE set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] network VALUE match-type exact on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] network VALUE match-type normal on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] network VALUE match-type refines on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ospf3ase [ instance VALUE ] network VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng all-ipv6-routes [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng all-ipv6-routes off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng network VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng network VALUE action VALUE set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng network VALUE match-type exact on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng network VALUE match-type normal on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng network VALUE match-type refines on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from ripng network VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] from static-route VALUE [ metric VALUE ] on set ipv6 route-redistribution to ospf3 [ instance VALUE ] from static-route VALUE off set ipv6 route-redistribution to ospf3 [ instance VALUE ] off set ipv6 route-redistribution to ospf3 off set ipv6 route-redistribution to ripng from bgp-as-number VALUE all-ipv6-routes metric VALUE on set ipv6 route-redistribution to ripng from bgp-as-number VALUE all-ipv6-routes off set ipv6 route-redistribution to ripng from bgp-as-number VALUE network VALUE action VALUE set ipv6 route-redistribution to ripng from bgp-as-number VALUE network VALUE match-type exact on set ipv6 route-redistribution to ripng from bgp-as-number VALUE network VALUE match-type normal on set ipv6 route-redistribution to ripng from bgp-as-number VALUE network VALUE match-type refines on set ipv6 route-redistribution to ripng from bgp-as-number VALUE network VALUE metric VALUE on set ipv6 route-redistribution to ripng from bgp-as-number VALUE network VALUE off set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE all-ipv6-routes metric VALUE on set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE all-ipv6-routes off set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE network VALUE action VALUE set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE network VALUE match-type exact on set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE network VALUE match-type normal on set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE network VALUE match-type refines on set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE network VALUE metric VALUE on set ipv6 route-redistribution to ripng from bgp-as-path VALUE origin VALUE network VALUE off set ipv6 route-redistribution to ripng from interface VALUE [ metric VALUE ] on set ipv6 route-redistribution to ripng from interface VALUE off set ipv6 route-redistribution to ripng from kernel all-ipv6-routes metric VALUE on set ipv6 route-redistribution to ripng from kernel all-ipv6-routes off set ipv6 route-redistribution to ripng from kernel network VALUE action VALUE set ipv6 route-redistribution to ripng from kernel network VALUE match-type exact on set ipv6 route-redistribution to ripng from kernel network VALUE match-type normal on set ipv6 route-redistribution to ripng from kernel network VALUE match-type refines on set ipv6 route-redistribution to ripng from kernel network VALUE metric VALUE on set ipv6 route-redistribution to ripng from kernel network VALUE off set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] all-ipv6-routes metric VALUE on set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] all-ipv6-routes off set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] network VALUE action VALUE set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] network VALUE match-type exact on set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] network VALUE match-type normal on set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] network VALUE match-type refines on set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] network VALUE metric VALUE on set ipv6 route-redistribution to ripng from ospf3 [ instance VALUE ] network VALUE off set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] all-ipv6-routes metric VALUE on set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] all-ipv6-routes off set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] network VALUE action VALUE set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] network VALUE match-type exact on set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] network VALUE match-type normal on set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] network VALUE match-type refines on set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] network VALUE metric VALUE on set ipv6 route-redistribution to ripng from ospf3ase [ instance VALUE ] network VALUE off set ipv6 route-redistribution to ripng from static-route VALUE metric VALUE on set ipv6 route-redistribution to ripng from static-route VALUE off set ipv6 route-redistribution to ripng off