09.12.2012 Views

Understanding the network.pdf - Back to Home

Understanding the network.pdf - Back to Home

Understanding the network.pdf - Back to Home

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Controlling Redistribution<br />

In some cases, it is not always desirable <strong>to</strong> redistribute all <strong>the</strong> routing<br />

announcements from one pro<strong>to</strong>col in<strong>to</strong> ano<strong>the</strong>r. To restrict <strong>the</strong> flow of dynamic<br />

route announcements between routers belonging <strong>to</strong> <strong>the</strong> same routing policy or<br />

between pro<strong>to</strong>col redistributions, IOS provides route filtering. Route filtering is<br />

particularly advantageous for administra<strong>to</strong>rs who need <strong>to</strong> keep strict control over<br />

<strong>the</strong> route announcements exchanged between routers.<br />

Filtering with Distribution Lists<br />

The route filter's responsibility is <strong>to</strong> suppress unwanted routing information from<br />

being redistributed, entered in or advertised out of <strong>the</strong> routing table. Although <strong>the</strong><br />

result is <strong>the</strong> same as redistribution, this process behaves differently if a link state or<br />

distance-vec<strong>to</strong>r pro<strong>to</strong>col is being used. When you use a route filter with a distance<br />

vec<strong>to</strong>r pro<strong>to</strong>col, <strong>the</strong> filter affects not only <strong>the</strong> router <strong>the</strong> filter refers <strong>to</strong>, but also all<br />

<strong>the</strong> routers that receive advertisements from <strong>the</strong> filtered router. This is <strong>the</strong> result of<br />

<strong>the</strong> distance vec<strong>to</strong>r using <strong>the</strong>ir routing tables as <strong>the</strong> basis for <strong>the</strong> <strong>network</strong><br />

announcements. When filtering is employed with a link state pro<strong>to</strong>col, however, <strong>the</strong><br />

filter will only affect <strong>the</strong> local routing table. Link state pro<strong>to</strong>cols use link state<br />

announcements <strong>to</strong> construct <strong>the</strong>ir routing tables, and <strong>the</strong>se are unaffected by route<br />

filters.<br />

Routing filters are configured in two parts, starting with <strong>the</strong> filter list, which is a<br />

standard access list. Access list entries are entered using only <strong>the</strong> <strong>network</strong> address:<br />

asbr-a1(config)#access-list 2 permit 129.0.0.0<br />

asbr-a1(config)#access-list 2 permit 192.168.0.0<br />

asbr-a1(config)#access-list 2 permit 192.168.10.0<br />

After <strong>the</strong> list is created, it is applied <strong>to</strong> <strong>the</strong> routing pro<strong>to</strong>col configuration with <strong>the</strong><br />

routing configuration subcommand . Inbound filter lists are applied <strong>to</strong> interfaces. They<br />

permit or deny <strong>the</strong> flow of route announcements through a router interface.<br />

Inbound filters are used for suppressing route propagation with distance vec<strong>to</strong>r<br />

pro<strong>to</strong>cols or <strong>the</strong> addition of route announcements on a local router when used with<br />

a link state pro<strong>to</strong>col. They are often used <strong>to</strong> correct a side effect of route<br />

redistribution known as route feedback. Route feedback occurs when routing<br />

information is advertised in <strong>the</strong> wrong direction across a redistributing router.<br />

Inbound filters are also useful from a security perspective, if you are only routing <strong>to</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!