From: Howard C. Berkowitz (hcb@gettcomm.com)
Date: Wed Nov 19 2003 - 21:35:04 GMT-3
At 4:21 PM -0800 11/19/03, Nickolay Romensky wrote:
>You can do 'distribute-list in' on each router.
>Not scaleable enough.
Usually, doing distribute-list in on intra-area routes breaks OSPF
intra-area synchronization.
When you speak of not being scalable, however, are you thinking of
the performance impact of filtering, or the labor of the
configuration? Outside the CCIE lab, I find the latter argument to
be much overstated.
True, if you manually have to type commands into each router, it's
slow. But if you have a repetitious tasks, there are many ways to
automate the process. Keeping all your configurations on a TFTP
server on a UNIX box, where you can run scripts or Perl on them, and
then reboot the routers on a schedule, often is a very good solution.
If rebooting is impractical, you still can automate logging into the
routers and running Tcl/expect.
>
>
>-----Original Message-----
>From: Danny.Andaluz@triaton-na.com [mailto:Danny.Andaluz@triaton-na.com]
>Sent: Wednesday, November 19, 2003 8:37 AM
>To: marco@rodrigues.ca
>Cc: ccielab@groupstudy.com
>Subject: RE: Filtering specific LSA's in OSPF
>
>I see what you mean Marco, but in my case the network only consists if about
>20 routers. I don't think the impact would be that great.
>
>-----Original Message-----
>From: Marco P. Rodrigues [mailto:marco@rodrigues.ca]
>Sent: Wednesday, November 19, 2003 11:25 AM
>To: Andaluz, Danilo, Triaton/NA
>Cc: ccielab@groupstudy.com
>Subject: Re: Filtering specific LSA's in OSPF
>
>
>.:Hey, Group. Does anyone know of a way to filter specific LSA from leaving
>.:or coming into a router. I'm having an issue in our production network.
>I .:know you can do the "database-filter-all out" and the "neighbor
>.:database-filter", but it blocks everything. I'm looking for something
>.:similar to what EIGRP can do with dist-lists. I can do a distribute-list
>in .:and keep it from being installed in the routing table of the router and
>this .:works fine, but the LSA still comes in and gets sent downstream to
>other .:neighbors. Any ideas?
>
>Good question, although my understanding of OSPF may be primitive, but wont
>the filtering of any LSA's either in/out be very dangerous due to the fact
>the each router in the area requires a full topological view of the network.
>I assume a fragmented view of the network on each router would cause
>somewhat inconsistent results? :)
>
>I know for a fact Juniper's don't allow the manipulation of LSA's inbound
>for either IS-IS or OSPF.
>
>Any thoughts?
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Dec 12 2003 - 12:29:14 GMT-3