RE: Not possible to filter External LSA's between areas in

From: kasturi cisco (kasturi_cisco@hotmail.com)
Date: Sat Jun 17 2006 - 08:54:32 ART


Hello,

Ok guys i stand corrected. Thanks for the Link - i had read it long back but
never tried it and forgotton the same too. Have attached the configs and
details for benifit of all.

topology:

  R106(asbr) -----------R100--------area 0 ------ R102 ------area 2
    I I
    I RIP I area 1
   6.6.6.6 I
                             R101
                               I
                               I lo0 >> area 1

Some conclusions:

1.Distribute list "out" does not work, for Inter-Area routes only IN.
2. I tried filtering the External route on ASBR and it works. External LSa
filtering using route-maps did not work on ABR between areas. The route does
not make it to the routing table on the ABR but is there in the database.
The route is not filtered from the routing table and Database on neighboring
routers.
3. Route-map with distribute list in works for the O IA routes between
areas.

==============================
External LSA filtering on ASBR itself:

R101#sh ip ospf DAtabase external
            OSPF Router with ID (1.1.1.1) (Process ID 100)

R101#sh ip route
Gateway of last resort is not set
     1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
     172.16.0.0/24 is subnetted, 2 subnets
O IA 172.16.1.0 [110/20] via 172.16.2.1, 00:47:31, Ethernet0/0
C 172.16.2.0 is directly connected, Ethernet0/0
     10.0.0.0/32 is subnetted, 1 subnets
O IA 10.10.10.10 [110/11] via 172.16.2.1, 00:47:31, Ethernet0/0

router ospf 100
router-id 10.10.10.10
log-adjacency-changes
redistribute rip subnets tag 120 route-map r2o
network 10.10.10.10 0.0.0.0 area 10
network 172.16.1.1 0.0.0.0 area 0
network 172.16.2.1 0.0.0.0 area 1
distribute-list route-map oia in
!
router rip
version 2
redistribute ospf 100 metric 2
network 150.150.0.0
no auto-summary
!
route-map r2o deny 10
match tag 120

============================

External LSA filtering on ABR rx the External route:

router ospf 100
router-id 10.10.10.10
log-adjacency-changes
network 10.10.10.10 0.0.0.0 area 10
network 150.150.1.1 0.0.0.0 area 150
network 172.16.1.1 0.0.0.0 area 0
network 172.16.2.1 0.0.0.0 area 1
distribute-list route-map oia in
!
!
ip classless
no ip http server
!
!
access-list 10 deny 2.2.2.2
access-list 10 deny 6.6.6.6
access-list 10 permit any
!
route-map oia permit 10
match ip address 10

R100#sh ip route ospf
     1.0.0.0/32 is subnetted, 1 subnets
O 1.1.1.1 [110/11] via 172.16.2.2, 00:11:24, Ethernet1/0

R100#sh ip ospf dat ext

            OSPF Router with ID (10.10.10.10) (Process ID 100)

                Type-5 AS External Link States

  Routing Bit Set on this LSA
  LS age: 1075
  Options: (No TOS-capability, DC)
  LS Type: AS External Link
  Link State ID: 6.6.6.6 (External Network Number )
  Advertising Router: 6.6.6.6
  LS Seq Number: 80000001
  Checksum: 0x9A56
  Length: 36
  Network Mask: /32
        Metric Type: 1 (Comparable directly to link state metric)
        TOS: 0
        Metric: 20
        Forward Address: 0.0.0.0
        External Route Tag: 0

R101#sh ip route ospf
     6.0.0.0/32 is subnetted, 1 subnets
O E1 6.6.6.6 [110/94] via 172.16.2.1, 00:13:33, Ethernet0/0
     172.16.0.0/24 is subnetted, 2 subnets
O IA 172.16.1.0 [110/20] via 172.16.2.1, 00:19:26, Ethernet0/0
     10.0.0.0/32 is subnetted, 1 subnets
O IA 10.10.10.10 [110/11] via 172.16.2.1, 00:19:26, Ethernet0/0
     150.150.0.0/24 is subnetted, 1 subnets
O IA 150.150.1.0 [110/74] via 172.16.2.1, 00:19:26, Ethernet0/0

R101#sh ip ospf database external
            OSPF Router with ID (1.1.1.1) (Process ID 100)
                Type-5 AS External Link States

  Routing Bit Set on this LSA
  LS age: 1140
  Options: (No TOS-capability, DC)
  LS Type: AS External Link
  Link State ID: 6.6.6.6 (External Network Number )
  Advertising Router: 6.6.6.6
  LS Seq Number: 80000001
  Checksum: 0x9A56
  Length: 36
  Network Mask: /32
        Metric Type: 1 (Comparable directly to link state metric)
        TOS: 0
        Metric: 20
        Forward Address: 0.0.0.0
        External Route Tag: 0

=============================
Inter Area route filtering:

R102(config-router)#distribute-list route-map oia out
% OUT direction is not allowed in case of OSPF
R102(config-router)#

router ospf 100
router-id 10.10.10.10
log-adjacency-changes
redistribute rip subnets tag 120 route-map r2o
network 10.10.10.10 0.0.0.0 area 10
network 172.16.1.1 0.0.0.0 area 0
network 172.16.2.1 0.0.0.0 area 1
distribute-list route-map oia in
!
router rip
version 2
redistribute ospf 100 metric 2
network 150.150.0.0
no auto-summary
!
access-list 10 deny 2.2.2.2
access-list 10 permit any
!
route-map r2o deny 10
match tag 120
!
route-map oia permit 10
match ip address 10
!

R101#sh ip route >>>> 2.2.2.2 has been denied by the route-map
Gateway of last resort is not set
     1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
     172.16.0.0/24 is subnetted, 2 subnets
O IA 172.16.1.0 [110/20] via 172.16.2.1, 00:56:07, Ethernet0/0
C 172.16.2.0 is directly connected, Ethernet0/0
     10.0.0.0/32 is subnetted, 1 subnets
O IA 10.10.10.10 [110/11] via 172.16.2.1, 00:56:07, Ethernet0/0

HTH.
Kasturi.



This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:33 ART