RE: ISIS route filtering

From: Ozgur Guler (Garanti Teknoloji) (OzgurG@garanti.com.tr)
Date: Fri Oct 03 2003 - 12:25:28 GMT-3


Hello Navaid,
i spent some time with this one...
here is my solution for a specific case.
but it will give you the idea ....

r1---se0-r2-se1---r3
r1-r2 are L2 neighbors...
r2-r3 ara L2 neighbors...

Description:
what i do is, create another isis process on r2,
with the same area id of r3 (enable it on se 1)
so that it will receive r3 routes as Level-1.

and another process on r1,
enable it on se 0,
so that it will be a L2 nei of r1 over se0

and use
redistribute isis ip level-1 into level-2 distribute-list 100
to filter the routes...

how to filter r3 routers so that r1 does not receive it...on r2

r3
------------------------
router isis
net 49.0003.0000.0000.0003.00
passive-int lo 0
passive-int lo 1
..

r2
-----------------------
int se 0
ip router isis

int se 1
ip router isis 2

router isis
 net 49.0002.0000.0000.0002.00
 redistribute isis ip level-1 into level-2 distribute-list 100
!
router isis 2
 net 49.0003.0000.0000.0002.00
 is-type level-1

access-l 100 permit ip host [route1] any
access-l 100 permit ip host [route2] any
....

r1

----
router isis
 net 49.0001.0000.0000.0002.00

another thing is u can use distance 255 to filter every route... this is not what u want probably...

Ozgur

-----Original Message----- From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of navaid@rogers.com Sent: Monday, September 29, 2003 5:41 PM To: ccielab@groupstudy.com Subject: ISIS route filtering

How do we filter routers so neighbor do not see our routes.... I am unable to find distribute-list under router isis.

Navaid

1

***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***



This archive was generated by hypermail 2.1.4 : Mon Nov 24 2003 - 07:52:56 GMT-3