From: support@ccie.com.au
Date: Thu Aug 14 2008 - 04:16:19 ART
Hi,
I have labed your almost exact senario in my lab. I was sucsessfull on
filtering ony the /8. It works just fine for me. I am wondering if yours
is related to an IOS issiue..... i would try to do debug ip rip and ip
rip events inorder to see what rip is doing with your outbound
advertizments..... config belo:
R1#> SH RUN
router ospf 1
router-id 155.1.146.6
log-adjacency-changes
redistribute rip metric 1 subnets
network 77.77.73.1 0.0.0.0 area 1
network 155.1.146.6 0.0.0.0 area 0
!
router rip
version 2
redistribute ospf 1 metric 1 route-map RIP
passive-interface default
network 54.0.0.0
neighbor 54.1.1.254
no auto-summary
!
ip classless
ip http server
!
!
ip prefix-list RIP seq 5 permit 77.0.0.0/8
ip prefix-list RIP seq 10 deny 0.0.0.0/0 le 32
route-m ap RIP permit 10
match ip address prefix-list RIP
!
route-map RIP deny 20
r1#sh ip route
Gateway of last resort is not set
R 212.212.212.0/24 [120/1] via 54.1.1.254, 00:00:20, Serial0/1.1
C 204.12.1.0/24 is directly connected, FastEthernet0/1
155.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C 155.1.146.0/24 is directly connected, FastEthernet0/0.1
O 155.1.146.1/32 [110/1] via 155.1.146.1, 00:08:03,
FastEthernet0/0.1
O 155.1.146.4/32 [110/11] via 155.1.146.1, 00:08:03,
FastEthernet0/0.1
R 116.0.0.0/8 [120/1] via 54.1.1.254, 00:00:20, Serial0/1.1
R 115.0.0.0/8 [120/1] via 54.1.1.254, 00:00:21, Serial0/1.1
54.0.0.0/24 is subnetted, 1 subnets
C 54.1.1.0 is directly connected, Serial0/1.1
66.0.0.0/32 is subnetted, 1 subnets
O IA 66.66.0.1 [110/2] via 155.1.146.1, 00:08:05, FastEthernet0/0.1
R 212.18.1.0/24 [120/1] via 54.1.1.254, 00:00:21, Serial0/1.1
77.0.0.0/8 is variably subnetted, 6 subnets, 2 masks
O IA 77.77.70.0/24 [110/2] via 155.1.146.1, 00:08:05,
FastEthernet0/0.1
O IA 77.77.71.0/24 [110/2] via 155.1.146.1, 00:08:05,
FastEthernet0/0.1
O IA 77.77.72.0/24 [110/2] via 155.1.146.1, 00:08:05,
FastEthernet0/0.1
C 77.77.73.0/24 is directly connected, Loopback5
O IA 77.77.77.0/24 [110/2] via 155.1.146.1, 00:08:05,
FastEthernet0/0.1
O IA 77.0.0.0/8 [110/12] via 155.1.146.1, 00:08:05, FastEthernet0/0.1
R 212.18.3.0/24 [120/1] via 54.1.1.254, 00:00:21, Serial0/1.1
R 212.18.2.0/24 [120/1] via 54.1.1.254, 00:00:21, Serial0/1.1
R 212.18.5.0/24 [120/1] via 54.1.1.254, 00:00:21, Serial0/1.1
R 212.18.4.0/24 [120/1] via 54.1.1.254, 00:00:21, Serial0/1.1
150.1.0.0/24 is subnetted, 1 subnets
C 150.1.6.0 is directly connected, Loopback0
BB1#sh ip route rip
R 77.0.0.0/8 [120/1] via 54.1.1.6, 00:00:04, Serial0/1.1
BB1#ping 77.77.71.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 77.77.71.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/61/64 ms
STEVE K
www.ccie.com.au
------- Original Message ------- On 8/13/2008 8:09 PM Igor Manassypov
wrote:
Hi Mohamed,
I am not doing summarization via route-map, - it is already done within
ospf process, and the 0/0 route is in routing table on the redistributing
router.
The point of route-map is to filter out unwanted entries, such as in my
case the more-specific ones. This technique works very well in the
opposite well, i.e. on filtering from rip->ospf...
Mohamed Tandou wrote: Igor,
i don't think you can summarize using route map. The network in your pod
is /24 and you summarize with /16. The only thing i can think use ip
summary address as someone mentioned. if you are able to do it please let
me know
Thanks
Mohamed
On Tue, Aug 12, 2008 at 12:12 PM, akyccie wrote:
Whenever you use the summary address it creates and route pointing to
null0 in routing table. So pls try below router map
route-map OSPF->RIP permit 10
match ip interface Null0
-aky
----- Original Message ----- From: "Igor Manassypov"
To: "Hong Chan" ; "Huan Pham"
Cc: "Igor Manassypov" ;
Sent: Tuesday, Augu st 12, 2008 5:38 PM
Subject: Re: ospf->rip redistribution filtering with route-map
under rip I am using a 'neighbor' command for unicast-updating...
Hong Chan wrote: oh, I miss that and through it is another "network"
statement
2008/8/12 Huan Pham
He has neighbor statement for RIP, mate :-)
------------------------------
*From:* Hong Chan [mailto:howard.chan34@gmail.com]
*Sent:* Tuesday, 12 August 2008 4:00 PM
*To:* Igor Manassypov
*Cc:* Huan Pham; ccielab@groupstudy.com
*Subject:* Re: ospf->rip redistribution filtering with RR
Still cannot figure out the problem.
I suggest you to use the route-map to set the metric for the OSPF->RIP
route(s), eg., set metric 5, then see if the route-map leaks route or
not.
Moreover, I see the "passive-interface default" but I don't see any "no
passive-interface ex/x" under router rip. Is that normal to get the route
update from redistribution?
2008/8/12 Igor Manassypov
Here it goes, its a bit long but simple. I realize there are other
options
for accomplishing this, however I am puzzled why this setup is not
working
as expected. Out of curiosity, on a different testbench I setup a
mirrored
route-map from rip to ospf redistribution allowing just the summary, and
that worked perfectly. I am wondering if RIP is behaving differently with
route-maps?!!
Router R1 is connected to BB1. R1 is running both ospf and rip, and BB1
is
running only rip.
Here is the config on R1:
router rip
version 2
redistribute ospf 77 metric 1 route-map OSPF->RIP
passive-interface default
network 150.1.0.0
neighbor 150.1.1.254
no auto-summary
router ospf 77
router-id 77.77.1.1
log-adjacency-changes
area 167 virtual-link 77.77.7.7
redist ribute rip subnets route-map RIP->OSPF
network 77.77.1.1 0.0.0.0 area 1
network 77.77.12.1 0.0.0.0 area 1
network 77.77.17.1 0.0.0.0 area 167
network 77.77.21.1 0.0.0.0 area 1
neighbor 77.77.21.2
neighbor 77.77.12.2
ip prefix-list SUMMARY seq 5 permit 77.0.0.0/8
ip prefix-list SUMMARY seq 10 deny 0.0.0.0/0 le 32
route-map OSPF->RIP permit 10
match ip address prefix-list SUMMARY
route-map OSPF->RIP deny 20
R1#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS
level-2
ia - IS-IS inter area, * - candidate default, U - per-user static
route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
77.0.0.0/8 is variably subnetted, 20 subnets, 3 masks
C 77.77.1.0/24 is directly connected, Loopback0
O IA 77.77.3.0/24 [110/76] via 77.77.17.7, 04:53:48, Ethernet0/0
O IA 77.77.4.0/24 [110/13] via 77.77.17.7, 04:53:48, Ethernet0/0
O IA 77.77.5.0/24 [110/13] via 77.77.17.7, 04:53:48, Ethernet0/0
O 77.77.6.0/24 [110/12] via 77.77.17.7, 04:53:48, Ethernet0/0
O 77.77.7.0/24 [110/11] via 77.77.17.7, 04:53:48, Ethernet0/0
O 77.77.8.0/24 [110/12] via 77.77.17.7, 04:53:48, Ethernet0/0
O 77.77.9.0/24 [110/12] via 77.77.17.7, 04:53:48, Ethernet0/0
O 77.77.10.0/24 [110/12] via 77.77.17.7, 04:53:48, Ethernet0/0
C 77.77.12.0/30 is directly connected, Serial1/0
C 77.77.17.0/24 is directly connected, Ethernet0/0
C 77.77.21.0/30 is directly connected, Serial1/1
O IA 77.77.28.0/24 [110/12] via 77.77.17.7, 04:53:49, Ethernet0/0
O 77.77.33.0/24 [110/11] via 77.77.17.7, 04:53:49, Ethernet0/0
O IA 77.77.3 6.0/24 [110/75] via 77.77.17.7, 04:53:49, Ethernet0/0
O 77.77.44.0/24 [110/11] via 77.77.17.7, 04:53:49, Ethernet0/0
O IA 77.77.48.0/24 [110/12] via 77.77.17.7, 04:53:49, Ethernet0/0
O IA 77.77.58.0/24 [110/12] via 77.77.17.7, 04:53:49, Ethernet0/0
O 77.77.67.0/24 [110/11] via 77.77.17.7, 04:53:49, Ethernet0/0
O IA 77.0.0.0/8 [110/11] via 77.77.17.7, 04:53:49, Ethernet0/0
R 199.172.0.0/24 [120/1] via 150.1.1.254, 00:00:06, Ethernet0/1
150.100.0.0/24 is subnetted, 1 subnets
R 150.100.1.0 [120/1] via 150.1.1.254, 00:00:06, Ethernet0/1
150.1.0.0/24 is subnetted, 1 subnets
C 150.1.1.0 is directly connected, Ethernet0/1
150.250.0.0/24 is subnetted, 1 subnets
R 150.250.1.0 [120/1] via 150.1.1.254, 00:00:06, Ethernet0/1
150.200.0.0/24 is subnetted, 1 subnets
R 150.200.1.0 [120/1] via 150.1.1.254, 00:00:06, Ethernet0/1
BB1#sh ip route rip
77.0.0.0/8 is variably subnetted, 20 subnets, 3 masks
R 77.77.1.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.3.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.4.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.5.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.6.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.7.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.8.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.9.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.10.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.12.0/30 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.17.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.21.0/30 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.28.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.33.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.36.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.44.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.48.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.58.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.77.67.0/24 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
R 77.0.0.0/8 [120/1] via 150.1.1.77, 00:00:01, Ethernet0/0
*Hong Chan * wrote:
I don't see any wrong with your configuration but the config can be
simpler.
For me, I won't use prefix list to deny the route but let the statement
"route-map OSPF->RIP deny 20" to filter the routes.
Pleae provide the show ip route in the rip & full configuration of the
router to let us to see which router redistribute the ospf route into rip
domain
2008/8/12 Huan Pham
I do not see any problem with your config.
Please try "clear ip ospf process" on the router that do redistribution,
to force the router to refresh routing table, and to apply the
route-map.
It worked for me in similar cases. Let me know if that works for you.
Alternatively, you can you "distribute-list out interface" under the RIP
to filter traffic you send to the other RIP neighbor, and the interface
command "ip summary-address rip 77.0.0.0 255.0.0.0" to create summary
route.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Igor Manassypov
Sent: Tuesday, 12 August 2008 5:17 AM
To: ccielab@groupstudy.com
Subject: ospf->rip redistribution filtering with RR
Hi Gang,
Can someone please help me out with this scenario:
- i have an ospf-rip redistribution, where ospf runs over my 77.x.x.x
network with a bunch of routes. I am trying to create a summary within
ospf, and redistribute only that summary to my rip process on same
router by means of a route map like follows:
router rip
version 2
redistribute ospf 77 metric 1 route-map OSPF->RIP passive-interface
default network 150.1.0.0 neighbor 150.1.1.254 no auto-summary
ip prefix-list SUMMARY seq 5 permit 77.0.0.0/8 ip prefix-list SUMMARY
seq 10 deny 0.0.0.0/0 le 32 !
route-map OSPF->RIP permit 10
match ip address prefix-list SUMMARY
route-map OSPF->RIP deny 20
After redistribution, within rip I still get the complete routing info
coming from ospf. Why would the above RR not stop the more specifics?!
Thanks!!
Igor M., M.Eng, P.Eng
Network Architect
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:30 ART