I have two Nexus 9000s configured as VPC. I have an ASA firewall with a VPC port-channel to the Nexus switches. I am peering OSPF between the Nexus and the ASA. Both of the Nexus and the ASA are in Area 0.
I want to block some routes being installed into OSPF on the Nexus Switches. As far as I can tell the only way to do this with NXOS is with the table-map feature. (Below is my configuration)
ip prefix-list allowed-ospf-routes-from-firewall seq 10 permit 10.0.10.0/24
ip prefix-list allowed-ospf-routes-from-firewall seq 10 permit 10.0.20.0/24
route-map ospf-in-from-firewall permit 10
match ip address prefix-list allowed-ospf-routes-from-firewall
router ospf 1
table-map ospf-in-from-firewall filter
Is there a better way to do this with NXOS features?
Thanks
