H3C Technologies H3C SecPath F1000-E User Manual
Page 452
427
3.
Configure Area 1 as an NSSA area:
# Configure Router A.
[RouterA] ospf
[RouterA-ospf-1] area 1
[RouterA-ospf-1-area-0.0.0.1] nssa
[RouterA-ospf-1-area-0.0.0.1] quit
# Configure SecPath.
[SecPath] ospf
[SecPath-ospf-1] area 1
[SecPath-ospf-1-area-0.0.0.1] nssa
[SecPath-ospf-1-area-0.0.0.1] quit
[SecPath-ospf-1] quit
NOTE:
•
If SecPath in the NSSA area wants to obtain routes to other areas within the AS, you need to configure
the nssa command with the keyword default-route-advertise on Router A (an ABR) so that Router C can
obtain a default route.
•
H3C recommends configuring the nssa command with the keyword no-summary on Router A to reduce
the routing table size on NSSA routers. On other NSSA routers, you only need to configure the nssa
command.
# Display routing information on SecPath.
[SecPath] display ospf routing
OSPF Process 1 with Router ID 10.4.1.1
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.2.1.0/24 3 Transit 10.2.1.2 10.4.1.1 0.0.0.1
10.3.1.0/24 7 Inter 10.2.1.1 10.2.1.1 0.0.0.1
10.4.1.0/24 3 Stub 10.4.1.1 10.4.1.1 0.0.0.1
10.5.1.0/24 17 Inter 10.2.1.1 10.2.1.1 0.0.0.1
10.1.1.0/24 5 Inter 10.2.1.1 10.2.1.1 0.0.0.1
Total Nets: 5
Intra Area: 2 Inter Area: 3 ASE: 0 NSSA: 0
4.
Configure SecPath to redistribute static routes:
[SecPath] ip route-static 3.1.2.1 24 10.4.1.2
[SecPath] ospf
[SecPath-ospf-1] import-route static
[SecPath-ospf-1] quit
# Display routing information on Router C.
OSPF Process 1 with Router ID 10.5.1.1
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer