Hi,
Fairly new to RIP on the Mikrotiks, but after some help if anyone can.
We have a pair of Mikrotik's CHR's running on Hyper-V with VRRP setup. All working very nicely.
We now want to have multiple individual single CHR's sharing routes with the Central Pair of CHR's. They will need to send there networks up but only for certain interfaces. These interfaces will all be networks in the 10.100.0.0 networks. I was hoping I could use filters on the the Central Pair of CHR's to block all routes that are outside of the subnet but I cannot get it to work.
Is this possible, or is there a better way?
Thanks
Re: Blocking/Allowing Subnets RIP
I think that best way of achieving your goal will be deploy OSPF at your network, at redesign everything to /30 WANs. But, the main question here will be how will your remote CHRs be connected to your couple Central routers??
Re: Blocking/Allowing Subnets RIP
How exactly did you try to filter the RIP messages?
RIP uses the 'Prefix Lists' for incoming/outgoing messages, not the 'Filters'.
Note that filtering is done in order of the filters (sort by #). Also take care, the prefix length needs to be matched, too.
e.g. to filter everything from 10.1.1.0/24, you need to set the prefix length to 24-32.
Setting it to 24 will filter only 10.1.1.0. Setting it to 32 will filter only individual hosts (/32).
Also filtering all has to be 0.0.0.0/0 with prefix length 0-32.
An example:
If you select this list called 'test' as 'In Prefix List' on your RIP interface, it will discard 10.0.0.1, 10.128.0.0/16 and 10.1.20.0/23, and accept 10.1.21.1 (from inside 10.1.20.0/23, it comes before it), accept all other 10.0.0.0/8 and drop everything else...
The same applies on outgoing routes if you use it as 'Out Prefix List'.
But as sri2007 states, OSPF would probably do a better job, and RIP is a little obsolete...
RIP uses the 'Prefix Lists' for incoming/outgoing messages, not the 'Filters'.
Note that filtering is done in order of the filters (sort by #). Also take care, the prefix length needs to be matched, too.
e.g. to filter everything from 10.1.1.0/24, you need to set the prefix length to 24-32.
Setting it to 24 will filter only 10.1.1.0. Setting it to 32 will filter only individual hosts (/32).
Also filtering all has to be 0.0.0.0/0 with prefix length 0-32.
An example:
Code: Select all
/routing prefix-lists
add action=discard chain=test comment="Discard single host" prefix=10.0.0.1/32 prefix-length=32
add action=discard chain=test comment="Discard a subnet" prefix=10.128.0.0/16 prefix-length=16-32
add chain=test comment="accept single host" prefix=10.1.21.1/32 prefix-length=32
add action=discard chain=test comment="discard another subnet" prefix=10.1.20.0/23 prefix-length=23-32
add chain=test comment="Accept other" prefix=10.0.0.0/8 prefix-length=8-32
add action=discard chain=test comment="Discard the rest"
The same applies on outgoing routes if you use it as 'Out Prefix List'.
But as sri2007 states, OSPF would probably do a better job, and RIP is a little obsolete...
Who is online
Users browsing this forum: loloski and 21 guests