From: FCO.JAVIER TOME MORAN (fjtm@tid.es)
Date: Sun Sep 18 2005 - 17:25:53 GMT-3
If you want to to prevent Type3 LSA routes enter Area66 you need to
apply the filter-list on inbound direction. The configuration applied
should be like this..
router ospf 1
area 66 filter-list prefix AREA_66_INBOUND in
ip prefix-list AREA_66_INBOUND deny 0.0.0.0/0 le 32
With this config you will be denying all prefixes. If you have already
tried this, may be you forgot to clear neighbor relationships on the
router to force the update of databases of all routers in area 66...
I remember having tested this with in 12.2(15)T and I seeing it work. I
will try to test it again as soon as I can and let you know...
----- Mensaje original -----
De: nenad pudar <nenad.pudar@gmail.com>
Fecha: Domingo, Septiembre 18, 2005 8:25 pm
Asunto: Re: OSPF ABR Type 3 LSA Filtering
> Javi
>
> This is exactly what I want in this case (to prevent all inter-
> area routes
> to enter area 66)
> However in some other examples I tried I see that it is not
> working in
> either direction.
>
> nenad
>
>
> On 9/18/05, FCO.JAVIER TOME MORAN <fjtm@tid.es> wrote:
> >
> > Hi Henad,
> >
> > I am not really sure, but I think that you missed the direction
> of the
> > filtering clause. "Out" direction is for prefixes leaving the Area,
> > and "In" direccion is for prefixes entering the Area.
> >
> > Please, try and tell us about the result...
> >
> > Javi
> >
> >
> >
> > ----- Mensaje original -----
> > De: nenad pudar <nenad.pudar@gmail.com>
> > Fecha: Domingo, Septiembre 18, 2005 6:40 pm
> > Asunto: OSPF ABR Type 3 LSA Filtering
> >
> > > Problem with OSPF ABR Type 3 LSA Filtering
> > >
> > > OSPF ABR Type 3 LSA Filtering is supposed to be supported from
> > > 12.2(4) T.
> > > I can configure it but I do not see that it works
> > > I am trying to filter all IA routes from ABR in area 66
> > >
> > > RTA-R1#sh ver
> > > Cisco Internetwork Operating System Software
> > > IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(11)T11, RELEASE
> > > SOFTWARE(fc1)
> > >
> > > router ospf 1
> > > router-id 1.1.1.1 <http://1.1.1.1> <http://1.1.1.1>
> > > log-adjacency-changes
> > > area 0 authentication message-digest
> > > area 66 filter-list prefix AREA_66_OUT out
> > > network 10.50.2.2 <http://10.50.2.2> <http://10.50.2.2>
> 0.0.0.0<http://0.0.0.0><> http://0.0.0.0> area 0
> > > network 10.100.2.1 <http://10.100.2.1> <http://10.100.2.1>
> 0.0.0.0<http://0.0.0.0><> http://0.0.0.0>
> > > area 111
> > > network 172.16.35.66 <http://172.16.35.66>
> <http://172.16.35.66> 0.0.0.0<http://0.0.0.0>
> > > <http://0.0.0.0> area 0
> > > network 172.16.66.6 <http://172.16.66.6> <http://172.16.66.6>
> 0.0.0.0<http://0.0.0.0><> http://0.0.0.0>
> > > area 66
> > > !
> > >
> > > !
> > > ip prefix-list AREA_66_OUT seq 5 deny 0.0.0.0/0
> <http://0.0.0.0/0> <
> > http://0.0.0.0/0>
> > > le 32
> > >
> > > However I still see all IA routes on the other end (router in
> area 66)
> > >
> > > Is there anything wrong in this config or I am missing something
> > > here ?
> > >
> > > thanks
> > > nenad
> > >
> > >
> >
>
This archive was generated by hypermail 2.1.4 : Sun Oct 02 2005 - 14:40:15 GMT-3