This article provides information on how to advertise the dynamic VPN pool route to other routers in the network via a dynamic routing protocol.

• How to advertise the dynamic VPN pool via dynamic routing protocols.
• The IP address in the pool is 192.168.1.0/24 for the dynamic VPN clients.
• This pool has to be advertised via a routing protocol to other routers in the network.

1. Create a route with next-hop reject for the pool network:

   set routing-options static route 192.168.1.0/24 reject
   
   root@210-lm-1# show routing-options 
   static {
       route 192.168.1.0/24 reject;
   }
   

• Create a policy under policy-options to export this route:

  set policy-options policy-statement dyn-vpn-route term 1 from instance master
  set policy-options policy-statement dyn-vpn-route term 1 from route-filter 192.168.1.0/24 exact
  set policy-options policy-statement dyn-vpn-route term 1 then accept
  set policy-options policy-statement dyn-vpn-route term 2 then reject
  
  root@210-lm-1# show policy-options 
  policy-statement dyn-vpn-route {
      term 1 {
          from {
              instance master;
              route-filter 192.168.1.0/24 exact;
          }
          then accept;
      }
      term 2 {
          then reject;
      }
  }
  

• Apply the policy as an export policy in the routing-protocol (which is OSPF in this example):

  set protocols ospf export dyn-vpn-route