Re: [LONG] Not possible to filter External LSA's between

From: Ivan (ivan@iip.net)
Date: Fri Jun 16 2006 - 07:31:12 ART


Long message ....................

Elaboration "not-advertise" keyword

Topology :
Core-2 --(area 1 nssa)-- [Fa0/1]Core-sw1[vl27,28] --(area 0)-- [vl27,28]
Core-sw2

TEST 1

Without not-adverrtise
-----------------------------------------
Core_sw1#sh run | b router ospf
router ospf 101
 router-id 172.27.227.1
 log-adjacency-changes
 area 0 authentication message-digest
 area 1 nssa default-information-originate
 area 1 range 172.21.0.0 255.255.0.0
 network 172.21.178.0 0.0.0.255 area 1
 network 172.21.179.0 0.0.0.255 area 1
 network 172.27.227.0 0.0.0.255 area 0
 network 172.28.128.0 0.0.0.255 area 0
!

Core_sw2#sh ip route ospf
     172.21.0.0 255.255.0.0 is variably subnetted, 3 subnets, 2 masks
O E1 172.21.175.0 255.255.255.128 <------- This from Core-2
           [110/902] via 172.27.227.1, 00:00:14, Vlan27
           [110/902] via 172.28.128.1, 00:00:14, Vlan28
O E1 172.21.175.128 255.255.255.128 <------ This from Core-2
           [110/902] via 172.27.227.1, 00:00:14, Vlan27
           [110/902] via 172.28.128.1, 00:00:14, Vlan28
O IA 172.21.0.0 255.255.0.0 <---- Summary route from Core-sw1
                               [110/2] via 172.28.128.1, 00:00:14, Vlan28
                               [110/2] via 172.27.227.1, 00:00:14, Vlan27

[.... skipped...]

Place not-advertise
----------------------------------------------
Core_sw1#sh run | b router ospf
router ospf 101
 router-id 172.27.227.1
 log-adjacency-changes
 area 0 authentication message-digest
 area 1 nssa default-information-originate
 area 1 range 172.21.0.0 255.255.0.0 not-advertise !!!!!!!!!!!!!!!!!!!!!

Core_sw2#sh ip route ospf
O IA 172.22.0.0 255.255.0.0 [110/2] via 172.27.227.2, 00:00:04, Vlan27
     10.0.0.0 255.0.0.0 is variably subnetted, 7 subnets, 5 masks
O IA 10.177.177.0 255.255.255.128
           [110/2] via 172.28.128.7, 00:00:04, Vlan28
           [110/2] via 172.27.227.7, 00:00:04, Vlan27

Here we see that summary is remove and more longer remove.

TEST 2

Without not-advertise
--------------------------------
Core_sw1#sh run | b router ospf 101
router ospf 101
 router-id 172.27.227.1
 log-adjacency-changes
 area 0 authentication message-digest
 area 1 nssa default-information-originate
 network 172.21.178.0 0.0.0.255 area 1
 network 172.21.179.0 0.0.0.255 area 1
 network 172.27.227.0 0.0.0.255 area 0
 network 172.28.128.0 0.0.0.255 area 0

Core-2#sh run | b router ospf
router ospf 101
 router-id 172.21.178.1
 log-adjacency-changes
 area 1 nssa
 redistribute eigrp 101 metric 900 metric-type 1 subnets
 passive-interface Serial0/2.1
 passive-interface Serial0/2.2
 network 172.21.177.0 0.0.0.255 area 1
 network 172.21.178.0 0.0.0.255 area 1

Core_sw1#sh ip route ospf
     172.21.0.0 255.255.0.0 is variably subnetted, 8 subnets, 2 masks
O 172.21.177.0 255.255.255.128
           [110/782] via 172.21.178.129, 00:03:06, FastEthernet0/1
O 172.21.178.0 255.255.255.128
           [110/2] via 172.21.178.129, 00:03:06, FastEthernet0/1
O N1 172.21.175.0 255.255.255.128 <---------------- exist
           [110/1682] via 172.21.178.129, 00:02:56, FastEthernet0/1
O 172.21.177.128 255.255.255.128
           [110/1563] via 172.21.178.129, 00:03:06, FastEthernet0/1
O N1 172.21.175.128 255.255.255.128 <--------------- exist
           [110/1682] via 172.21.178.129, 00:02:57, FastEthernet0/1
O 172.21.0.0 255.255.0.0 is a summary, 00:03:07, Null0

[...skipped...]

With not-advertise
----------------------------------------
Core-2#sh run | b router ospf
router ospf 101
 router-id 172.21.178.1
 log-adjacency-changes
 area 1 nssa
 summary-address 172.21.0.0 255.255.0.0 not-advertise !!!!!!!!!!!!!!!!!!!!
 redistribute eigrp 101 metric 900 metric-type 1 subnets
 passive-interface Serial0/2.1
 passive-interface Serial0/2.2
 network 172.21.177.0 0.0.0.255 area 1
 network 172.21.178.0 0.0.0.255 area 1
!

Core_sw1#sh ip route ospf
     172.21.0.0 255.255.0.0 is variably subnetted, 6 subnets, 2 masks
O 172.21.177.0 255.255.255.128
           [110/782] via 172.21.178.129, 00:00:09, FastEthernet0/1
O 172.21.178.0 255.255.255.128
           [110/2] via 172.21.178.129, 00:00:09, FastEthernet0/1
O 172.21.177.128 255.255.255.128
           [110/1563] via 172.21.178.129, 00:00:09, FastEthernet0/1
O 172.21.0.0 255.255.0.0 is a summary, 00:00:09, Null0

Here we see that all external routes (O N1) disapper.

> Don't think the filter-list prefix would work.
>
> Can you elaborate on:
> not-advertise with area range on ABR
>
> How is that accomplished?
>
> On 6/15/06, Ivan <ivan@iip.net> wrote:
> > distribute-list out work only on routers where external prefixes
> > originating.
> > To filter LSA 3-4-5 you can use
> > *) not-advertise with area range on ABR
> > *) summary-address - make anoter external prefix)
> > ***) filter-list prefix - not sure about this)
> >
> > > Hello group,
> > >
> > > I tried filtering External LSA's between areas with an area filter list
> >
> > but
> >
> > > it does not work! I was told that filter lists do not work on External
> > > LSA's. Is that true?
> > >
> > > Also I tried using inbound distribute lists but it seems the External
> >
> > LSA's
> >
> > > are still being forwarded to the next hop routers and it seems I have
> > > to use distribute lists on all the routers...
> > >
> > > How do you filter External LSA's?
> > >
> > > Thanks.
> > >
> > > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> > --
> > Ivan
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

-- 
Ivan


This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:33 ART