Re: OSPF filtering

Hmmm... I thought solving this problem with event manager. On my
router that has backup link connected to it I configured event manager
that will unshut the port when primary link fail.
I'm pinging other side (location 2) and using that track in event
manager. It works, but not the whole part. See, when I lose ping
replies, event manager unshut the port and traffic start going via
backup. But the problem is that my ping in SLA after OSPF converged
starts getting replies and event applet shut down the port cause it
thinks that primary link is up. I tried to solve that with PBR. I
configured one loopback and thought that PBR will always send packets
with source IP of that loopback to the router that has primary link on
it. But obviously PBR doesn't work when traffic is originated on that
router?
So, is there some advanced option in IP SLA that can track route in
routing table combined with neighbor that advertise that route? Or
something similar?

On Mon, Jan 25, 2010 at 3:01 PM, Tyson Scott <tscott_at_ipexpert.com> wrote:
> Ivan,
>
> It is definitely a design consideration that would solve your problems.
>
> Regards,
>
> Tyson Scott - CCIE #13513 R&S, Security, and SP
> Technical Instructor - IPexpert, Inc.
> Mailto: tscott_at_ipexpert.com
> Telephone: +1.810.326.1444, ext. 208
> Live Assistance, Please visit: www.ipexpert.com/chat
> eFax: +1.810.454.0130
>
>
>
> -----Original Message-----
> From: Ivan Hrvatska [mailto:ivanzghr_at_gmail.com]
> Sent: Monday, January 25, 2010 3:24 AM
> To: Tyson Scott
> Cc: Marko Milivojevic; Narbik Kocharians; Cisco certification
> Subject: Re: OSPF filtering
>
> Customer who owns the network I am using as transit network wants that
> area 212 is stub. Probably he doesn't want any external networks to be
> redistributed into OSPF domain.
>
> On Sat, Jan 23, 2010 at 4:46 PM, Tyson Scott <tscott_at_ipexpert.com> wrote:
>> Ivan,
>>
>> Does it have to remain specifically a stub or can it be a NSSA? As I
>> mentioned earlier creating two processes as NSSA's would definitely do the
>> trick.
>>
>> ABR2 and ABR3
>>
>> router ospf 1
>> area 212 nssa
>> network x.x.x.x 0.0.0.0 area 0
>> network y.y.y.y 0.0.0.0 area 212
>>
>> ABR1 and ABR4
>>
>> router ospf 1
>> area 212 nssa
>> network y.y.y.y 0.0.0.0 area 212
>> redistribute ospf 2 subnets metric-type 1 metric 10
>> router ospf 2
>> area 212 nssa
>> network z.z.z.z 0.0.0.0 area 212
>> redistribute ospf 1 subnets metric-type 1 metric 100000
>>
>> You would then need to test between sites.
>>
>> HTH
>>
>>
>> Regards,
>>
>> Tyson Scott - CCIE #13513 R&S, Security, and SP
>> Technical Instructor - IPexpert, Inc.
>> Mailto: tscott_at_ipexpert.com
>> Telephone: +1.810.326.1444, ext. 208
>> Live Assistance, Please visit: www.ipexpert.com/chat
>> eFax: +1.810.454.0130
>>
>> IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA
> (R&S,
>> Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security &
> Service
>> Provider) Certification Training with locations throughout the United
>> States, Europe and Australia. Be sure to check out our online communities
> at
>> www.ipexpert.com/communities and our public website at www.ipexpert.com
>>
>>
>> -----Original Message-----
>> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> Ivan
>> Hrvatska
>> Sent: Saturday, January 23, 2010 8:38 AM
>> To: Marko Milivojevic
>> Cc: Narbik Kocharians; Cisco certification
>> Subject: Re: OSPF filtering
>>
>> Hmmm....diagram is something like this:
>>
>>
>> (Area 212) ABR1 ------------------ ABR2 (Area 0) ABR3
>> -------------------ABR4 (Area 212)
>> Location 1 *
>> Location 2
>> * *
>> *
>> * *
>> *
>> * *
>> *
>> * *
>> *
>> * *
>> *
>> ********************** ABR 4 (area
> 212)**************
>>
>> where * is backup link and ---- should be primary.
>> Between Area0 and location 2 is another area so connection to area0 is
>> through GRE. Area 212 is stub.
>>
>> On Sat, Jan 23, 2010 at 11:51 AM, Marko Milivojevic <markom_at_ipexpert.com>
>> wrote:
>>> On Sat, Jan 23, 2010 at 10:27, Ivan Hrvatska <ivanzghr_at_gmail.com> wrote:
>>>> I sent diagram in attachment as jpg pic. Is it visible?
>>>
>>> GS doesn't do attachments, hence all the ASCII art we see from time to
>> time :-)
>>>
>>> --
>>> Marko Milivojevic - CCIE #18427
>>> Senior Technical Instructor - IPexpert
>>>
>>> Mailto: markom_at_ipexpert.com
>>> Telephone: +1.810.326.1444
>>> Fax: +1.810.454.0130
>>> Community: http://www.ipexpert.com/communities
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Feb 06 2010 - 14:38:26 ART