RE: ospf->rip redistribution filtering with RR

From: Huan Pham (Huan.Pham@peopletelecom.com.au)
Date: Tue Aug 12 2008 - 03:04:34 ART


He has neighbor statement for RIP, mate :-)

________________________________

From: Hong Chan [mailto:howard.chan34@gmail.com]
Sent: Tuesday, 12 August 2008 4:00 PM
To: Igor Manassypov
Cc: Huan Pham; ccielab@groupstudy.com
Subject: Re: ospf->rip redistribution filtering with RR

Still cannot figure out the problem.
I suggest you to use the route-map to set the metric for the OSPF->RIP
route(s), eg., set metric 5, then see if the route-map leaks route or
not.
Moreover, I see the "passive-interface default" but I don't see any "no
passive-interface ex/x" under router rip. Is that normal to get the
route update from redistribution?

2008/8/12 Igor Manassypov <imanassypov@rogers.com>

        Here it goes, its a bit long but simple. I realize there are
other options for accomplishing this, however I am puzzled why this
setup is not working as expected. Out of curiosity, on a different
testbench I setup a mirrored route-map from rip to ospf redistribution
allowing just the summary, and that worked perfectly. I am wondering if
RIP is behaving differently with route-maps?!!

        Router R1 is connected to BB1. R1 is running both ospf and rip,
and BB1 is running only rip.

        Here is the config on R1:

        router rip
         version 2
         redistribute ospf 77 metric 1 route-map OSPF->RIP
         passive-interface default
         network 150.1.0.0 <http://150.1.0.0/>
         neighbor 150.1.1.254 <http://150.1.1.254/>
         no auto-summary

        router ospf 77
         router-id 77.77.1.1 <http://77.77.1.1/>
         log-adjacency-changes
         area 167 virtual-link 77.77.7.7 <http://77.77.7.7/>
         redistribute rip subnets route-map RIP->OSPF
         network 77.77.1.1 <http://77.77.1.1/> 0.0.0.0
<http://0.0.0.0/> area 1
         network 77.77.12.1 <http://77.77.12.1/> 0.0.0.0
<http://0.0.0.0/> area 1
         network 77.77.17.1 <http://77.77.17.1/> 0.0.0.0
<http://0.0.0.0/> area 167
         network 77.77.21.1 <http://77.77.21.1/> 0.0.0.0
<http://0.0.0.0/> area 1
         neighbor 77.77.21.2 <http://77.77.21.2/>
         neighbor 77.77.12.2 <http://77.77.12.2/>

        ip prefix-list SUMMARY seq 5 permit 77.0.0.0/8
        ip prefix-list SUMMARY seq 10 deny 0.0.0.0/0 le 32
        route-map OSPF->RIP permit 10
         match ip address prefix-list SUMMARY
        route-map OSPF->RIP deny 20

        R1#sh ip route
        Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
               D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter
area
               N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external
type 2
               E1 - OSPF external type 1, E2 - OSPF external type 2
               i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 -
IS-IS level-2
               ia - IS-IS inter area, * - candidate default, U -
per-user static route
               o - ODR, P - periodic downloaded static route

        Gateway of last resort is not set

             77.0.0.0/8 is variably subnetted, 20 subnets, 3 masks
        C 77.77.1.0/24 is directly connected, Loopback0
        O IA 77.77.3.0/24 [110/76] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O IA 77.77.4.0/24 [110/13] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O IA 77.77.5.0/24 [110/13] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O 77.77.6.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O 77.77.7.0/24 [110/11] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O 77.77.8.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O 77.77.9.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        O 77.77.10.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:48, Ethernet0/0
        C 77.77.12.0/30 is directly connected, Serial1/0
        C 77.77.17.0/24 is directly connected, Ethernet0/0
        C 77.77.21.0/30 is directly connected, Serial1/1
        O IA 77.77.28.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O 77.77.33.0/24 [110/11] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O IA 77.77.36.0/24 [110/75] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O 77.77.44.0/24 [110/11] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O IA 77.77.48.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O IA 77.77.58.0/24 [110/12] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O 77.77.67.0/24 [110/11] via 77.77.17.7
<http://77.77.17.7/> , 04:53:49, Ethernet0/0
        O IA 77.0.0.0/8 [110/11] via 77.77.17.7 <http://77.77.17.7/>
, 04:53:49, Ethernet0/0
        R 199.172.0.0/24 [120/1] via 150.1.1.254
<http://150.1.1.254/> , 00:00:06, Ethernet0/1
             150.100.0.0/24 is subnetted, 1 subnets
        R 150.100.1.0 <http://150.100.1.0/> [120/1] via
150.1.1.254 <http://150.1.1.254/> , 00:00:06, Ethernet0/1
             150.1.0.0/24 is subnetted, 1 subnets
        C 150.1.1.0 <http://150.1.1.0/> is directly connected,
Ethernet0/1
             150.250.0.0/24 is subnetted, 1 subnets
        R 150.250.1.0 <http://150.250.1.0/> [120/1] via
150.1.1.254 <http://150.1.1.254/> , 00:00:06, Ethernet0/1
             150.200.0.0/24 is subnetted, 1 subnets
        R 150.200.1.0 <http://150.200.1.0/> [120/1] via
150.1.1.254 <http://150.1.1.254/> , 00:00:06, Ethernet0/1

        BB1#sh ip route rip
             77.0.0.0/8 is variably subnetted, 20 subnets, 3 masks
        R 77.77.1.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.3.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.4.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.5.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.6.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.7.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.8.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.9.0/24 [120/1] via 150.1.1.77 <http://150.1.1.77/>
, 00:00:01, Ethernet0/0
        R 77.77.10.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.12.0/30 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.17.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.21.0/30 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.28.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.33.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.36.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.44.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.48.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.58.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.77.67.0/24 [120/1] via 150.1.1.77
<http://150.1.1.77/> , 00:00:01, Ethernet0/0
        R 77.0.0.0/8 [120/1] via 150.1.1.77 <http://150.1.1.77/> ,
00:00:01, Ethernet0/0

        Hong Chan <howard.chan34@gmail.com> wrote:

                I don't see any wrong with your configuration but the
config can be simpler.
                For me, I won't use prefix list to deny the route but
let the statement "route-map OSPF->RIP deny 20" to filter the routes.

                Pleae provide the show ip route in the rip & full
configuration of the router to let us to see which router redistribute
the ospf route into rip domain

                2008/8/12 Huan Pham <Huan.Pham@peopletelecom.com.au>

                        I do not see any problem with your config.

                        Please try "clear ip ospf process" on the router
that do redistribution,
                        to force the router to refresh routing table,
and to apply the
                        route-map.

                        It worked for me in similar cases. Let me know
if that works for you.

                        Alternatively, you can you "distribute-list out
interface" under the RIP
                        to filter traffic you send to the other RIP
neighbor, and the interface
                        command "ip summary-address rip 77.0.0.0
<http://77.0.0.0/> 255.0.0.0 <http://255.0.0.0/> " to create summary
                        route.

                        -----Original Message-----
                        From: nobody@groupstudy.com
[mailto:nobody@groupstudy.com] On Behalf Of
                        Igor Manassypov
                        Sent: Tuesday, 12 August 2008 5:17 AM
                        To: ccielab@groupstudy.com
                        Subject: ospf->rip redistribution filtering with
RR

                        Hi Gang,

                        Can someone please help me out with this
scenario:

                        - i have an ospf-rip redistribution, where ospf
runs over my 77.x.x.x
                        network with a bunch of routes. I am trying to
create a summary within
                        ospf, and redistribute only that summary to my
rip process on same
                        router by means of a route map like follows:

                        router rip
                         version 2
                         redistribute ospf 77 metric 1 route-map
OSPF->RIP passive-interface
                        default network 150.1.0.0 <http://150.1.0.0/>
neighbor 150.1.1.254 <http://150.1.1.254/> no auto-summary

                        ip prefix-list SUMMARY seq 5 permit 77.0.0.0/8
ip prefix-list SUMMARY
                        seq 10 deny 0.0.0.0/0 le 32 !
                        route-map OSPF->RIP permit 10
                         match ip address prefix-list SUMMARY
                        route-map OSPF->RIP deny 20

                        After redistribution, within rip I still get the
complete routing info
                        coming from ospf. Why would the above RR not
stop the more specifics?!

                        Thanks!!

                        Igor M., M.Eng, P.Eng
                        Network Architect

                        Blogs and organic groups at http://www.ccie.net
<http://www.ccie.net/>



This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:30 ART