Palo Alto Networks Knowledgebase: Filter specific route from being advertised to OSPF

Filter specific route from being advertised to OSPF

3939
Created On 02/08/19 00:03 AM - Last Updated 02/08/19 00:03 AM
Resolution

This article explains how to filter specific static routes from being advertised into OSPF while still advertising all other static routes.

 

The method highlighted in this article is useful when firewall has a large number of static routes configured and only some of the routes needs to be filtered.

 

 

Details:

 

PA-1 (12.12.12.1)  ------  (12.12.12.2) PA-2

 

1- Static routes configured on PA-1:

 

Screen Shot 2017-04-09 at 10.53.39 AM.png

 

 

2- Redistribution profile configured on PA-1:

 

Screen Shot 2017-04-09 at 10.54.07 AM.png

 

 

 3- This redistribution profile causes all static routes configured on PA-1 firewall to be redistributed into OSPF:

 

 

Screen Shot 2017-04-09 at 10.55.42 AM.png

 

 

Screen Shot 2017-04-09 at 10.56.22 AM.png

 

4- Now, suppose we want that all static routes should be advertised to PA-2 except the static route 4.4.4.0/24. This could be achieved by using Priority value in Redistribution Profile:

 

Screen Shot 2017-04-09 at 10.56.59 AM.png

 

Screen Shot 2017-04-09 at 10.57.17 AM.png

 

Profile "Redist-Static" has a priority of 5 and action set to "Redist". New profile, "Filter-Static" has a priority of 1 and action set to "No Redist".

When both profiles are referred in OSPF Export rules, profiles would be evaluated according to the priority assigned.

 

Lower value means higher priority. This would cause Filter-Static profile to be evaluated first and preferred over "Redist-Static" profile hence route 4.4.4.0/24 would  not be redistributed while other static routes would still be redistributed.

 

 

Screen Shot 2017-04-09 at 10.58.04 AM.png

 

 

Screen Shot 2017-04-09 at 10.58.17 AM.png

 

 

Note: Same configuration can be done for routes learned from other source type also e.g. for filtering specific connected routes to be exported into OSPF etc.



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cli2CAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language