Re: OSPF filtering

Ivan,

Did you try local PBR? This feature works for router-generated traffic. Just
watch out for the source IP.

Regards,

-- 
Piotr Kaluzny
CCIE #25665 (Security), CCSP, CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com
On Sat, Feb 6, 2010 at 2:38 PM, Ivan Hrvatska <ivanzghr_at_gmail.com> wrote:
> Hmmm... I thought solving this problem with event manager. On my
> router that has backup link connected to it I configured event manager
> that will unshut the port when primary link fail.
> I'm pinging other side (location 2) and using that track in event
> manager. It works, but not the whole part. See, when I lose ping
> replies, event manager unshut the port and traffic start going via
> backup. But the problem is that my ping in SLA after OSPF converged
> starts getting replies and event applet shut down the port cause it
> thinks that primary link is up. I tried to solve that with PBR. I
> configured one loopback and thought that PBR will always send packets
> with source IP of that loopback to the router that has primary link on
> it. But obviously PBR doesn't work when traffic is originated on that
> router?
> So, is there some advanced option in IP SLA that can track route in
> routing table combined with neighbor that advertise that route? Or
> something similar?
>
> On Mon, Jan 25, 2010 at 3:01 PM, Tyson Scott <tscott_at_ipexpert.com> wrote:
> > Ivan,
> >
> > It is definitely a design consideration that would solve your problems.
> >
> > Regards,
> >
> > Tyson Scott - CCIE #13513 R&S, Security, and SP
> > Technical Instructor - IPexpert, Inc.
> > Mailto: tscott_at_ipexpert.com
> > Telephone: +1.810.326.1444, ext. 208
> > Live Assistance, Please visit: www.ipexpert.com/chat
> > eFax: +1.810.454.0130
> >
> >
> >
> > -----Original Message-----
> > From: Ivan Hrvatska [mailto:ivanzghr_at_gmail.com]
> > Sent: Monday, January 25, 2010 3:24 AM
> > To: Tyson Scott
> > Cc: Marko Milivojevic; Narbik Kocharians; Cisco certification
> > Subject: Re: OSPF filtering
> >
> > Customer who owns the network I am using as transit network wants that
> > area 212 is stub. Probably he doesn't want any external networks to be
> > redistributed into OSPF domain.
> >
> > On Sat, Jan 23, 2010 at 4:46 PM, Tyson Scott <tscott_at_ipexpert.com>
> wrote:
> >> Ivan,
> >>
> >> Does it have to remain specifically a stub or can it be a NSSA?  As I
> >> mentioned earlier creating two processes as NSSA's would definitely do
> the
> >> trick.
> >>
> >> ABR2 and ABR3
> >>
> >> router ospf 1
> >>  area 212 nssa
> >>  network x.x.x.x 0.0.0.0 area 0
> >>  network y.y.y.y 0.0.0.0 area 212
> >>
> >> ABR1 and ABR4
> >>
> >> router ospf 1
> >>  area 212 nssa
> >>  network y.y.y.y 0.0.0.0 area 212
> >>  redistribute ospf 2 subnets metric-type 1 metric 10
> >> router ospf 2
> >>  area 212 nssa
> >>  network z.z.z.z 0.0.0.0 area 212
> >>  redistribute ospf 1 subnets metric-type 1 metric 100000
> >>
> >> You would then need to test between sites.
> >>
> >> HTH
> >>
> >>
> >> Regards,
> >>
> >> Tyson Scott - CCIE #13513 R&S, Security, and SP
> >> Technical Instructor - IPexpert, Inc.
> >> Mailto: tscott_at_ipexpert.com
> >> Telephone: +1.810.326.1444, ext. 208
> >> Live Assistance, Please visit: www.ipexpert.com/chat
> >> eFax: +1.810.454.0130
> >>
> >> IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA
> > (R&S,
> >> Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security &
> > Service
> >> Provider) Certification Training with locations throughout the United
> >> States, Europe and Australia. Be sure to check out our online
> communities
> > at
> >> www.ipexpert.com/communities and our public website at www.ipexpert.com
> >>
> >>
> >> -----Original Message-----
> >> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> > Ivan
> >> Hrvatska
> >> Sent: Saturday, January 23, 2010 8:38 AM
> >> To: Marko Milivojevic
> >> Cc: Narbik Kocharians; Cisco certification
> >> Subject: Re: OSPF filtering
> >>
> >> Hmmm....diagram is something like this:
> >>
> >>
> >> (Area 212) ABR1  ------------------ ABR2 (Area 0) ABR3
> >> -------------------ABR4 (Area 212)
> >> Location 1                                              *
> >>                      Location 2
> >>             *                                               *
> >>                                *
> >>               *                                             *
> >>                               *
> >>                 *                                           *
> >>                             *
> >>                   *                                         *
> >>                           *
> >>                     *                                       *
> >>                         *
> >>                       ********************** ABR 4 (area
> > 212)**************
> >>
> >> where * is backup link and ---- should be primary.
> >> Between Area0 and location 2 is another area so connection to area0 is
> >> through GRE. Area 212 is stub.
> >>
> >> On Sat, Jan 23, 2010 at 11:51 AM, Marko Milivojevic <
> markom_at_ipexpert.com>
> >> wrote:
> >>> On Sat, Jan 23, 2010 at 10:27, Ivan Hrvatska <ivanzghr_at_gmail.com>
> wrote:
> >>>> I sent diagram in attachment as jpg pic. Is it visible?
> >>>
> >>> GS doesn't do attachments, hence all the ASCII art we see from time to
> >> time :-)
> >>>
> >>> --
> >>> Marko Milivojevic - CCIE #18427
> >>> Senior Technical Instructor - IPexpert
> >>>
> >>> Mailto: markom_at_ipexpert.com
> >>> Telephone: +1.810.326.1444
> >>> Fax: +1.810.454.0130
> >>> Community: http://www.ipexpert.com/communities
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net