Community discussions

 
ubuntu118
newbie
Topic Author
Posts: 29
Joined: Wed Sep 30, 2015 11:56 am

OSPF: Filter routes using firewall

Mon Sep 17, 2018 8:33 am

Hi.
I'm looking for a way to filter some of OSPF advertisements using firewall instead of route filters. The reason is that one of route filters doesn't work as expected. How can OSPF packets be matched by advertised prefix? Is there any way?
Thanks
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5942
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: OSPF: Filter routes using firewall

Mon Sep 17, 2018 11:17 am

It could be possible with L7 filters, but running such filters will consume a lot of CPU resources and another problem is that OSPF does not send one LSA per packet, so even if you get packet to match you will be dropping all LSAs in that packet. Not to mention that this whole filtering thing will generally break OSPF.
 
ubuntu118
newbie
Topic Author
Posts: 29
Joined: Wed Sep 30, 2015 11:56 am

Re: OSPF: Filter routes using firewall

Mon Sep 17, 2018 11:58 am

OK, thanks for your reply. It seems that there is no way via firewall filters.
 
User avatar
IPANetEngineer
Trainer
Trainer
Posts: 1053
Joined: Fri Aug 10, 2012 6:46 am
Location: Jackson, MS, USA
Contact:

Re: OSPF: Filter routes using firewall

Mon Sep 17, 2018 6:19 pm

It might be more helpful to understand why you want to filter OSPF?
Global - MikroTik Support & Consulting - English | Francais | Español | Portuguese +1 855-645-7684
https://iparchitechs.com/services/mikro ... l-support/ mikrotiksupport@iparchitechs.com
 
ubuntu118
newbie
Topic Author
Posts: 29
Joined: Wed Sep 30, 2015 11:56 am

Re: OSPF: Filter routes using firewall

Mon Sep 17, 2018 9:22 pm

The reason can be found here: viewtopic.php?f=14&t=139282. In this post I have described the problem. Currently nobody has any idea how to filter this problematic route. This is the scenario which you have already had hepled me to implement correctly.

Who is online

Users browsing this forum: No registered users and 7 guests