distribute-list out and ospf

[sarahr202]

Hi everybody

I understand  how the command  "distribute-list " with option  "in" in ospf  works.  I am trying to understand how it behaves with  option " out " in ospf.

What kind of LSA will be controled i.e permitted or denied by " distribute-list XX out" ( where xx reyfers to access list)  ?

thank and Merry Christmas to all who celebrates it.

[sarahr202]

Hi everybody.

I do feel a little stupid by answering my question. But  my goal is not only to learn but also share what I have learned with others who might have same question.

Only lsa5 and lsa7 can be controlled by " distribute-list with "out" option in ospf and that too only on asbr.

And only prefix which asbr is redistributing can be controlled by this command. Let me illustrate this:

|---rip 10.0.0.0/8--R1--ospf-----R2-----ospf

                                                      |

                                                      |

                                                  11.0.0.0/8( eigrp)

Above R1 and R2 both are asbr. Now if we configure the commands on R2 as shown below:

router ospf

distribute-list 4 out

access-list 4 deny 10.0.0.0 0.255.255.255

access-list 4 permit any.

R2 will not stop lsa5 carrying 10.0.0.0/8 because R2 is not redistributing 10.0.0.0/8 into ospf but R1 is.

So we wish to stop lsa 5 carrying 10.0.0.0/8,  using "distribute-list 4 out ", we must configure this on R1 because R1 is redistributing 10.0.0.0/8 into ospf.

Happy Holidays!!!

[nspasov · Accepted solution]

Don't feel stupid! On the contrary, good job on finding the solution and thank you for sharing the answer here! High five from me and happy holidays! Perhaps you should close the thread as well.