cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1764
Views
2
Helpful
13
Replies

how to configure this ospf

jackjil
Level 1
Level 1

R7 should communicate with R1 and R2 but not with R6 

how to connect them
ma.PNG

 

1 Accepted Solution

Accepted Solutions

From your diagram, #1 should already be true.

#2 Not possible with using OSPF alone, going by your diagram.

"3. R7 router has the connectivity with R1 network 137.46.46.61" again, for OSPF and going by your diagram, shouldn't be possible.

"but R6 router donit have any connectivity with R1 network 137.46.46.61."  also again, wouldn't expect it to have connectivity.

As I wrote earlier, area 27, from provided information, doesn't have connection to area zero.

BTW, the above, doesn't appear to me to answer my question about the meaning of: "R7 should communicate with R1 and R2 but not with R6".

If you just want to block communication between routers, you can used ACLs for that.

However, when if you want to block network prefixes, @MHM Cisco World provides an OSPF method to do so, i.e. blocking network prefixes entering a particular router's route table.  If you were using EIGRP, such blocking, I believe would preclude R6 conveying R1/R2 routes to R7, but as OSPF is link-state, that happens even though R6, itself, will not "see" a (blocked) network prefix.

View solution in original post

13 Replies 13

Joseph W. Doherty
Hall of Fame
Hall of Fame

Could you clarify meaning of R6 should not communicate with R7?

BTW, you do have the problem that area 27 is not directly connected to area 0.

Make the end to end connectivity and do filtering.

1. R5 router don't have any network 137.46.46.0/24 network in routing table

2. R7 router should have connectivity with R2 network 137.46.46.28

3. R7 router has the connectivity with R1 network 137.46.46.61 but R6 router donit have any connectivity with R1 network 137.46.46.61.

From your diagram, #1 should already be true.

#2 Not possible with using OSPF alone, going by your diagram.

"3. R7 router has the connectivity with R1 network 137.46.46.61" again, for OSPF and going by your diagram, shouldn't be possible.

"but R6 router donit have any connectivity with R1 network 137.46.46.61."  also again, wouldn't expect it to have connectivity.

As I wrote earlier, area 27, from provided information, doesn't have connection to area zero.

BTW, the above, doesn't appear to me to answer my question about the meaning of: "R7 should communicate with R1 and R2 but not with R6".

If you just want to block communication between routers, you can used ACLs for that.

However, when if you want to block network prefixes, @MHM Cisco World provides an OSPF method to do so, i.e. blocking network prefixes entering a particular router's route table.  If you were using EIGRP, such blocking, I believe would preclude R6 conveying R1/R2 routes to R7, but as OSPF is link-state, that happens even though R6, itself, will not "see" a (blocked) network prefix.

Is this cofiguration correct ? if not please give me proper commands

 

Router 1

R1#config t
R1(config)#int f0/0
R1(config-if)#ip add 137.46.46.29 255.255.255.224
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#int e1/0
R1(config-if)#ip add 137.46.46.61 255.255.255.224
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#router ospf 100
R1(config-router)#network 137.46.46.61 0.0.0.31 area 0
R1(config-router)#network 137.46.46.29 0.0.0.31 area 0
R1(config-router)#exit
R1(config)#
------------------------------------------------------------------------------
Router 2

R2#config t
R2(config)#int f0/0
R2(config-if)#ip add 137.46.46.28 255.255.255.224
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#router ospf 100
R2(config-router)#network 137.46.46.28 0.0.0.31 area 0
R2(config-router)#exit
---------------------------------------------------------------------------------
Router 3

R3#config t
R3(config)#int e1/0
R3(config-if)#ip add 137.46.46.62 255.255.255.224
R3(config-if)#no shut
R3(config-if)#exit
R3(config)#int s2/2
R3(config-if)#ip add 137.46.46.92 255.255.255.224
R3(config-if)#no shut
R3(config-if)#exit
R3(config)#router ospf 100
R3(config-router)#network 137.46.46.62 0.0.0.31 area 0
R3(config-router)#network 137.46.46.92 0.0.0.31 area 0
R3(config-router)#exit
R3(config)#
-----------------------------------------------------------------------------------
R4

R4#config t
R4(config)#int s2/2
R4(config-if)#ip add 137.46.46.93 255.255.255.224
R4(config-if)#no shut
R4(config-if)#exit
R4(config)#int s2/0
R4(config-if)#ip add 143.87.156.1 255.255.255.224
R4(config-if)#no shut
R4(config-if)#exit
R4(config)#router ospf 100
R4(config-router)#router-id 4.4.4.4
R4(config-router)#network 137.46.46.93 0.0.0.31 area 0
R4(config-router)#network 143.87.156.1 0.0.0.3 area 17
R4(config-router)#area 17 virtual-link 5.5.5.5
R4(config-router)#exit
R4(config)#
--------------------------------------------------------------------------------------------
R5

R5#config t
R5(config)#int s2/0
R5(config-if)#ip add 143.87.156.2 255.255.255.224
R5(config-if)#no shut
R5(config-if)#exit
R5(config)#int s2/1
R5(config-if)#ip add 137.46.46.124 255.255.255.224
R5(config-if)#no shut
R5(config-if)#exit
R5(config)#router ospf 100
R5(config-router)#router-id 5.5.5.5
R5(config-router)#network 143.87.156.2 0.0.0.3 area 17
R5(config-router)#network 137.46.46.124 0.0.0.31 area 27
R5(config-router)#area 17 virtual-link 4.4.4.4
R5(config-router)#exit
R5(config)#
----------------------------------------------------------------------------------------------------
R6

R6#config t
R6(config)#int s2/1
R6(config-if)#ip add 137.46.46.125 255.255.255.224
R6(config-if)#no shut
R6(config-if)#exit
R6(config)#int f0/0
R6(config-if)#ip add 137.46.46.156 255.255.255.224
R6(config-if)#no shut
R6(config-if)#exit
R6(config)#router ospf 100
R6(config-router)#network 137.46.46.125 0.0.0.31 area 27
R6(config-router)#network 137.46.46.156 0.0.0.31 area 27
R6(config-router)#exit
R6(config)#
----------------------------------------------------------------------------------------------------------
R7

R7#config t
R7(config)#int f0/0
R7(config-if)#ip add 137.46.46.157 255.255.255.224
R7(config-if)#no shut
R7(config-if)#exit
R7(config)#router ospf 100
R7(config-router)#network 137.46.46.157 0.0.0.31 area 27
R7(config-router)#exit
R7(config)#




 

jackjil
Level 1
Level 1

Make the end to end connectivity and do filtering.

1. R5 router don't have any network 137.46.46.0/24 network in routing table

2. R7 router should have connectivity with R2 network 137.46.46.28

3. R7 router has the connectivity with R1 network 137.46.46.61 but R6 router donit have any connectivity with R1 network 137.46.46.61.

The only way I think is using distrubte list In in R7/R6

This distribute list in intra area will prevent R7/R6 from add prefix learn from OSPF into RIB.

please verify and give me proper

commands 

Router 1

R1#config t
R1(config)#int f0/0
R1(config-if)#ip add 137.46.46.29 255.255.255.224
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#int e1/0
R1(config-if)#ip add 137.46.46.61 255.255.255.224
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#router ospf 100
R1(config-router)#network 137.46.46.61 0.0.0.31 area 0
R1(config-router)#network 137.46.46.29 0.0.0.31 area 0
R1(config-router)#exit
R1(config)#
------------------------------------------------------------------------------
Router 2

R2#config t
R2(config)#int f0/0
R2(config-if)#ip add 137.46.46.28 255.255.255.224
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#router ospf 100
R2(config-router)#network 137.46.46.28 0.0.0.31 area 0
R2(config-router)#exit
---------------------------------------------------------------------------------
Router 3

R3#config t
R3(config)#int e1/0
R3(config-if)#ip add 137.46.46.62 255.255.255.224
R3(config-if)#no shut
R3(config-if)#exit
R3(config)#int s2/2
R3(config-if)#ip add 137.46.46.92 255.255.255.224
R3(config-if)#no shut
R3(config-if)#exit
R3(config)#router ospf 100
R3(config-router)#network 137.46.46.62 0.0.0.31 area 0
R3(config-router)#network 137.46.46.92 0.0.0.31 area 0
R3(config-router)#exit
R3(config)#
-----------------------------------------------------------------------------------
R4

R4#config t
R4(config)#int s2/2
R4(config-if)#ip add 137.46.46.93 255.255.255.224
R4(config-if)#no shut
R4(config-if)#exit
R4(config)#int s2/0
R4(config-if)#ip add 143.87.156.1 255.255.255.224
R4(config-if)#no shut
R4(config-if)#exit
R4(config)#router ospf 100
R4(config-router)#router-id 4.4.4.4
R4(config-router)#network 137.46.46.93 0.0.0.31 area 0
R4(config-router)#network 143.87.156.1 0.0.0.3 area 17
R4(config-router)#area 17 virtual-link 5.5.5.5
R4(config-router)#exit
R4(config)#
--------------------------------------------------------------------------------------------
R5

R5#config t
R5(config)#int s2/0
R5(config-if)#ip add 143.87.156.2 255.255.255.224
R5(config-if)#no shut
R5(config-if)#exit
R5(config)#int s2/1
R5(config-if)#ip add 137.46.46.124 255.255.255.224
R5(config-if)#no shut
R5(config-if)#exit
R5(config)#router ospf 100
R5(config-router)#router-id 5.5.5.5
R5(config-router)#network 143.87.156.2 0.0.0.3 area 17
R5(config-router)#network 137.46.46.124 0.0.0.31 area 27
R5(config-router)#area 17 virtual-link 4.4.4.4
R5(config-router)#exit
R5(config)#
----------------------------------------------------------------------------------------------------
R6

R6#config t
R6(config)#int s2/1
R6(config-if)#ip add 137.46.46.125 255.255.255.224
R6(config-if)#no shut
R6(config-if)#exit
R6(config)#int f0/0
R6(config-if)#ip add 137.46.46.156 255.255.255.224
R6(config-if)#no shut
R6(config-if)#exit
R6(config)#router ospf 100
R6(config-router)#network 137.46.46.125 0.0.0.31 area 27
R6(config-router)#network 137.46.46.156 0.0.0.31 area 27
R6(config-router)#exit
R6(config)#
----------------------------------------------------------------------------------------------------------
R7

R7#config t
R7(config)#int f0/0
R7(config-if)#ip add 137.46.46.157 255.255.255.224
R7(config-if)#no shut
R7(config-if)#exit
R7(config)#router ospf 100
R7(config-router)#network 137.46.46.157 0.0.0.31 area 27
R7(config-router)#exit
R7(config)#




 

I will check config two lab you ask for correct misconfig and send some note also

I will share all tonight 

I use same lab and config distribute-list in R2 tp deny 3.3.3.3 (LO of R3)
you can see the Lo 3.3.3.3 in ospf db but it missing from RIB of R2

Screenshot (577).pngScreenshot (578).png

i need commands please

 

@jackjil are this lab and in lab you must use opsf to prevent R6 to connect R7?

Please share excat lab I will like to run it.

Thanks 

R 7 should be communicate with R1
but R6 should not

Lab mention that you must specific use ospf or any other way.