Precautions
Virtual System
By default, the USG9500 supports 10 virtual systems. To have more virtual systems, you must apply for a license.
OSPF
You cannot configure OSPF directly in a virtual system. You must bind the VPN instance corresponding to the virtual system when creating the OSPF process in the root system.
Black-hole Route
Configure black-hole routes to the public addresses of the Portal system in the root system and black-hole routes to the public addresses of virtual machines in the virtual systems to prevent routing loops. These black-hole routes can be advertised through OSPF.
Policy Backup-based Acceleration Function
When a large number of policies exist (such as over 500 policies), the policy backup-based acceleration function must be enabled to improve policy matching efficiency during policy modification. If this function is enabled, however, the newly configured policy takes effect only after the policy backup-based acceleration process completes.