R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

318
# Display OSPF routing information on Firewall A.
[FirewallA] display ospf routing
OSPF Process 1 with Router ID 2.2.2.2
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.2.1.0/24 2 Transit 10.2.1.1 3.3.3.3 0.0.0.1
10.3.1.0/24 5 Inter 10.2.1.2 3.3.3.3 0.0.0.0
10.1.1.0/24 2 Transit 10.1.1.2 2.2.2.2 0.0.0.0
Total Nets: 3
Intra Area: 2 Inter Area: 1 ASE: 0 NSSA: 0
Firewall A has learned the route 10.3.1.0/24 to Area 2.
Route filtering configuration example
Network requirements
As shown in Figure 169:
• All the routers in the network run OSPF. The AS is divided into three areas.
• Firewall works as the ABR between Area 0 and Area 1. Router B works as the ABR between Area
0 and Area 2.
• Configure Router C as an ASBR to redistribute external routes (static routes), and configure a filter
policy on Router C to filter out route 3.1.3.0/24.
• Configure a route policy on Firewall to filter route 10.5.1.0/24.
Figure 169 Network diagram for OSPF route filtering configuration
Configuration procedure
1. Configure IP addresses for interfaces (omitted).
2. Configure OSPF basic functions (see “OSPF basic functions configuration example”).
3. Configure OSPF to redistribute routes.
# On Router C, configure a static route destined for network 3.1.1.0/24.
<RouterC> system-view
[RouterC] ip route-static 3.1.1.0 24 10.4.1.2