From: Craig Dorry (chdorry@yahoo.com)
Date: Sat Oct 09 2004 - 21:59:08 GMT-3
David - Have you tried just a simple "distribute-list
1 in" under the ISIS process? Then define access-list
1 deny 0.0.0.0, access-list 1 permit any.
While distribute-lists can't be used to filter routing
updates (all routers must have the same database), you
can use a distribute-list in with a link state
protocol to filter what routes make it from the
database into the routing table. Similarly, you can
use distribute-list out when you are redistributing
other routing protocols into ISIS/OSPF to determine
what route(s) get redistributed into the ISIS/OSPF
process.
Hope this helps.
--- "Hoonpongsimanont, Chalermchai"
<chalermchai.hoonpongsimanont@atosorigin.com> wrote:
> Hi Folks,
>
>
>
> I have a problem when trying to filter default route
> on ISIS Level 1 router.
>
>
>
>
> R5 (L1) --- R7 (L1/L2)
>
>
>
> On R5,
>
>
>
> r5#show isis database
>
>
>
> IS-IS Level-1 Link State Database:
>
> LSPID LSP Seq Num LSP Checksum LSP
> Holdtime ATT/P/OL
>
> r5.00-00 * 0x00000009 0xC158 661
> 0/0/0
>
> r7.00-00 0x0000000F 0x8FC3
> 1192 1/0/0 <-
> ATT Set to 1
>
> r7.01-00 0x00000005 0x1E9A 660
> 0/0/0
>
>
>
> r5#sh ip route isis
>
> 150.50.0.0/16 is variably subnetted, 19
> subnets, 3 masks
>
> i L1 150.50.60.0/24 [115/20] via 150.50.50.7,
> FastEthernet0/0
>
> i ia 150.50.4.0/24 [115/158] via 150.50.50.7,
> FastEthernet0/0
>
> i ia 150.50.8.8/32 [115/148] via 150.50.50.7,
> FastEthernet0/0
>
> i L1 150.50.7.7/32 [115/10] via 150.50.50.7,
> FastEthernet0/0
>
> i L1 150.50.101.0/30 [115/20] via 150.50.50.7,
> FastEthernet0/0
>
> i*L1 0.0.0.0/0 [115/10] via 150.50.50.7,
> FastEthernet0/0
>
>
>
> R7 Configuration
>
> !
>
> router isis
>
> net 47.0007.7777.7777.7777.00
>
> redistribute isis ip level-2 into level-1
> distribute-list 100
>
> passive-interface Loopback0
>
> !
>
>
>
> I don't want this default route to show up on R5.
> The only one way I found
> is configuring hidden command
> "never-set-attached-bit" under router isis of
> R7, and it's working fine.
>
>
>
> R7 Configuration
>
> !
>
> router isis
>
> net 47.0007.7777.7777.7777.00
>
> never-set-attached-bit
>
> redistribute isis ip level-2 into level-1
> distribute-list 100
>
> passive-interface Loopback0
>
> !
>
>
>
> On R5,
>
> r5#show isis database
>
>
>
> IS-IS Level-1 Link State Database:
>
> LSPID LSP Seq Num LSP Checksum LSP
> Holdtime ATT/P/OL
>
> r5.00-00 * 0x00000009 0xC158 431
> 0/0/0
>
> r7.00-00 0x00000010 0x85D4
> 1153 0/0/0 <-
> ATT Set to 0
>
> r7.01-00 0x00000006 0x1C9B
> 1166 0/0/0
>
> r5#show ip route isis
>
> 150.50.0.0/16 is variably subnetted, 19
> subnets, 3 masks
>
> i L1 150.50.60.0/24 [115/20] via 150.50.50.7,
> FastEthernet0/0
>
> i ia 150.50.4.0/24 [115/158] via 150.50.50.7,
> FastEthernet0/0
>
> i ia 150.50.8.8/32 [115/148] via 150.50.50.7,
> FastEthernet0/0
>
> i L1 150.50.7.7/32 [115/10] via 150.50.50.7,
> FastEthernet0/0
>
> i L1 150.50.101.0/30 [115/20] via 150.50.50.7,
> FastEthernet0/0
>
> <- Default route is gone ->
>
>
>
> I don't think I will get the point when using hidden
> command in real lab. Is
> there any other way to do this kind of thing? Thanks
> in advance.
>
>
>
> Cheers,
>
> David
>
>
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:45 GMT-3