Configuring route filtering at the cli, Network requirements, Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual
Page 459
434
OSPF Process 1 with Router ID 2.2.2.2
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.2.1.0/24 2 Transit 10.2.1.1 3.3.3.3 0.0.0.1
10.3.1.0/24 5 Inter 10.2.1.2 3.3.3.3 0.0.0.0
10.1.1.0/24 2 Transit 10.1.1.2 2.2.2.2 0.0.0.0
Total Nets: 3
Intra Area: 2 Inter Area: 1 ASE: 0 NSSA: 0
Router B has learned the route 10.3.1.0/24 to Area 2.
Configuring route filtering at the CLI
Network requirements
As shown in
:
•
All the routers in the network run OSPF. The AS is divided into three areas.
•
SecPath A works as the ABR between Area 0 and Area 1. Router A works as the ABR between Area
0 and Area 2.
Configure SecPath B as an ASBR to redistribute external routes (static routes), and configure a filter policy
on SecPath B to filter out route 3.1.3.0/24. Configure a routing policy on SecPath A to filter route
10.5.1.0/24.
Figure 274 Network diagram
Configuration procedure
1.
Configure IP addresses for interfaces. (Details not shown)
2.
Configure OSPF basic functions (see "
Configuring OSPF basic functions at the CLI
3.
Configure OSPF to redistribute routes:
# On SecPath B, configure a static route destined for network 3.1.1.0/24.
[SecPathB] ip route-static 3.1.1.0 24 10.4.1.2
# On SecPath B, configure a static route destined for network 3.1.2.0/24.
[SecPathB] ip route-static 3.1.2.0 24 10.4.1.2
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer