Filter
Top Products
330
Intel
®
NetStructure™ 480T Routing Switch User Guide
• External Filter—For switches configured to support multiple
OSPF areas (an ABR function), you can apply an access profile to
an OSPF area that filters a set of OSPF external routes from being
advertised into that area. To configure an external filter policy, use
this command:
configure ospf area <area_id> external-filter
[<access_profile> | none]
If any of the external
routes specified in the filter
have already been
advertised, those routes
will remain until the
associated LSAs in that
area time-out.
• ASBR Filter—For switches configured to support RIP and static
route re-distribution into OSPF, you can use an access profile to
limit the routes advertised into OSPF for the switch as a whole. To
configure an ASBR filter policy, use this command:
configure ospf asbr-filter [<access_profile> |
none]
• Direct Filter—For switches configured to support direct route re-
distribution into OSPF, you can use an access profile to limit the
routes that are advertised into OSPF for the switch as a whole. To
configure a direct filter policy, use this command:
configure ospf direct-filter [<access_profile> |
none]
OSPF Access Policy Example
Figure 17.7 illustrates an OSPF network that resembles the network
used previously in the RIP example. In this example, access to the
Internet is accomplished using the ASBR function on the switch
labeled Internet. As a result, all routes to the Internet are done
through external routes.
Suppose the network administrator wishes to only allow access to
certain Internet addresses falling within the range 192.1.1.0/24 to
get to and from the internal backbone.
To configure the switch labeled Internet, the commands would be:
create access-profile okinternet ipaddress
configure access-profile okinternet mode permit
configure access-profile okinternet add 192.1.1.0/
24
configure ospf asbr-filter okinternet