Hi,
I want configure some routing filter to stop /32 subnet re-distributing in ospf.
But mikrotik seem to ignore my filter:

prefix=x.x.x.x/32 prefix-lenght=32 action=reject chain=ospf-out

Any idea ?

Also, how can i stop the re-distribution of subnet smaller that /30 or /29 ?


Thanks to all

Mikrotik was 2.9.13 with routing-test

To just drop the /32s: if you want to drop everything /29 or longer: --Eric

Thanks, but it doesn't work. Must I enable filter somewere in ospf settings ?

Your not trying to filter routes that arrive via OSPF from being redistributed via OSPF, are you?

That won't work, and things would be much worse if it did, OSPF really needs to be internally consistant. Ospf-out filtering must be done at the router that is injecting the routes in the first place, not somewhere in the middle.

However, asuming that is not the case, it would be interesting to see the results of a "/routing export" command.

--Eric

Eric,
I want filter on pppoe-server. It add a /32 route for every customer, and i want block the re-distribution of thoose /32 subnet.

# feb/24/2006 20:47:59 by RouterOS 2.9.12
# software id = 9UAC-3TT
#
/ routing filter
add chain=ospf-out prefix=0.0.0.0/0 prefix-length=32 action=discard comment="" disabled=no
/ routing ospf
set router-id=0.0.0.0 distribute-default=never redistribute-connected=as-type-1 redistribute-static=no redistribute-rip=no redistribute-bgp=no metric-default=1 metric-connected=20 metric-static=20 \
metric-rip=20 metric-bgp=20
/ routing ospf area
set backbone area-id=0.0.0.0 authentication=none prefix-list-import="" prefix-list-export="" disabled=no
add area-id=0.0.0.1 name="local_10" default-cost=1 stub=no authentication=none prefix-list-import="" prefix-list-export="" disabled=no
/ routing ospf network
add network=y.y.y.y/30 area=local_10 disabled=no
/ routing bgp instance
set default as=65530 router-id=0.0.0.0 redistribute-static=no redistribute-connected=no redistribute-rip=no redistribute-ospf=no redistribute-other-bgp=no name="default" out-filter="" disabled=no
/ routing rip
set redistribute-static=no redistribute-connected=no redistribute-ospf=no redistribute-bgp=no metric-static=1 metric-connected=1 metric-ospf=1 metric-bgp=1 update-timer=30s timeout-timer=3m \
garbage-timer=2m
/ routing rip interface
add interface=all receive=v2 send=v2 authentication=none authentication-key="" in-filter="" out-filter="" key-chain=none disabled=no

I have a similar setup on a few units, and it works fine.

However, there are a couple of differences.

I'm first allowing only the networks I want, and then dropping the rest.

Sort of like: Also, all the units setup like this are still running 2.9.6, so something may have changed.

I'll give it a spin on some more recent test boxes when I get a chance.

--Eric