过滤ospf路由
过滤ospf路由
以100.0.0.1/32路由为例,如果过滤3类lsa,配置如下:
[r1]dis cu c ospf
[V200R003C00]
ospf 1
area 0.0.0.0
network 0.0.0.0 255.255.255.255
return
[r2]dis cu c ospf
[V200R003C00]
ospf 1
area 0.0.0.0
filter 2000 export
network 1.0.0.0 0.255.255.255
area 0.0.0.1
network 2.0.0.0 0.255.255.255
acl number 2000
rule 5 deny source 100.0.0.1 0
rule 10 permit
return
[r3] dis cu c ospf
[V200R003C00]
ospf 1
area 0.0.0.0
network 3.0.0.0 0.255.255.255
area 0.0.0.1
network 4.0.0.0 0.255.255.255
return
[r4]dis cu c ospf
[V200R003C00]
ospf 1
area 0.0.0.1
network 0.0.0.0 255.255.255.255
return
以100.0.0.1/32路由为例,如果过滤计算出来的路由,不同的只是r2的变动,配置如下:
[r2]dis cu c ospf
[V200R003C00]
ospf 1
filter-policy 2000 export
area 0.0.0.0
network 1.0.0.0 0.255.255.255
area 0.0.0.1
network 2.0.0.0 0.255.255.255
acl number 2000
rule 5 deny source 100.0.0.1 0
rule 10 permit
return
注意:acl要配置空的permit路由,否则执行默认动作deny,过滤到所有路由!