Hi All
I'm trying to create an OSPF filter on N7K-ABR (area 0.0.0.0) to filter all routes towards an AS Firewall in area 0.0.0.1.but i cant seem to getting the filter to work. My knowledge of NX-OS is pretty limited but i would assume the route-map and the policy itself has something missing. YES, i know one is going to ask if you filtering all routes, why have ospf running between N7K and the FW, reason, we running IP SLA on the FW and the Internet gateway, FW is sending a default route originate to the N7K...BUT i dont want to exchange all backbone routes into area 0.0.0.1, neither do i want to use stub or NSSA scenario... simple filter is prefered
Anyway, even if i dont filter everything, how can i filter out 10.22.0.0/24 (area 0.0.0.0) not to be advertised into area 0.0.0.1 ?
Your help will be highly appreciated
N7K-ABR
router ospf 100
router-id 10.22.1.x
area 0.0.0.0 authentication message-digest
area 0.0.0.1 authentication message-digest
area 0.0.0.1 filter-list route-map FW_Area1 in --- ASA-FW area 0.0.0.1..
Production# sh ip prefix-list FW_Area1 ---- Filter all routes
ip prefix-list FW_Area1: 1 entries
seq 5 deny 0.0.0.0/0 le 32
route-map FW_Area1, permit, sequence 10
Match clauses:
ip address prefix-lists: FW_Area1
Production# sh ip ospf policy statistics area 0.0.0.1 filter-list in --- I cant seem to find any helpful information on how to interpret this verification
C: No. of comparisions, M: No. of matches
route-map FW_Area1 permit 10
match ip address prefix-list FW_Area1 C: 106 M: 106
Total accept count for policy: 0
Total reject count for policy: 106
Production#
