Page 1 of 1
ospf how to prevent some dynamic routes to be added??
Posted: Tue Apr 06, 2010 1:16 pm
by kameelperdza
O have setup ospf with nmba and it seems to be working.
I have also noticed that it add all the routes that it can find as dynamic.
Is there a way to prevent some routes to be added. for security reasons?
Im planning to use 172.16.0.0/24 on my network. Currently i have three 192.168.0.0/24 networks on the same routers.
Re: ospf how to prevent some dynamic routes to be added??
Posted: Tue Apr 06, 2010 1:51 pm
by Eising
Use a routing filter.
/routing filter add chain=ospf-in prefix=192.168.1.0/24 action=discard
Re: ospf how to prevent some dynamic routes to be added??
Posted: Wed Apr 07, 2010 12:09 pm
by kameelperdza
And how do i stop the ip range 192.168.10.0/24 to be redistributed on wlan2
Re: ospf how to prevent some dynamic routes to be added??
Posted: Wed Apr 07, 2010 12:58 pm
by Eising
You have two chains available: ospf-in and ospf-out. The chain ospf-in works by filtering incoming routes. Those that are rejected through that chain will not enter the routers routing table. The chain ospf-out controls which routes will be advertised to ospf neighbours. If you want a specific prefix not advertised to your neighbour, you must filter it in ospf-out. As far as I can tell, you cannot selectively filter out routes per neighbour or output interface.
Re: ospf how to prevent some dynamic routes to be added??
Posted: Sat Apr 10, 2010 9:35 pm
by chickenlittle
does the ospf-out filter work on dynamic routes? like pppoe routes for example?? i did'nt manage to get them to work properly. if i choose log as an action i can see they are marked correctly, but dirscarding doesn't work. the router advertises the routes to his neighbors just as before.. bug or feature?
Re: ospf how to prevent some dynamic routes to be added??
Posted: Sat Apr 10, 2010 11:17 pm
by kazanova
can i hide my MT from neighbor discover
Re: ospf how to prevent some dynamic routes to be added??
Posted: Wed Apr 14, 2010 9:40 am
by janisk
what was said - you have 2 options, filter out routes when you send them out, but cannot do that per interface, just out. Or you fitler out certain routes when you receive. All routes added by OSPF are dynamic. usually with flags ADo that means - Active, Dynamic, ospf
Re: ospf how to prevent some dynamic routes to be added??
Posted: Wed Apr 14, 2010 10:36 am
by janisk
can i hide my MT from neighbor discover
please do not ask questions in threads that are not related to your question.
http://wiki.mikrotik.com/wiki/Manual:IP ... _discovery
Re: ospf how to prevent some dynamic routes to be added??
Posted: Sat Apr 17, 2010 5:44 pm
by kazanova
i don't see that my question is totally out of object
hid route is filter i see in that way