topic Re: OSPF Inbound Route Filter in General Topics

OSPF Inbound Route Filter

adevine — Fri, 12 Nov 2010 10:36:48 GMT

Hi,

I see in the admin guide that it is possible to filter the default route so that it is not learnt by the OSPF process.

Is there any way of applying a more granular filter so that I can restrict the Palo Alto OSPF process to only learn 10.0.0.0/8 routes? Similiar to an inbound Cisco distribute-list?

Cheers

Re: OSPF Inbound Route Filter

pkruse — Fri, 12 Nov 2010 15:37:46 GMT

With the current iteration of the product we do not provide that level of granularity, if this is an important feature you can take it up with your local SE and have a feature request submitted.

Re: OSPF Inbound Route Filter

kbrazil — Sat, 13 Nov 2010 00:54:30 GMT

Depending on the topology we might be able to do this with a redistribution profile attached to an export filter on whatever protocol you are redistributing into OSPF.

There is no way to reliably restrict routes within the OSPF LSA database itself - that's not how it's designed to work. (That is, it's not a distance-vector protocol that allows you to directly manipulate the routing table).

Cheers,

Kelly

Re: OSPF Inbound Route Filter

rroger — Fri, 20 Jan 2012 15:07:05 GMT

Hello,

Is this functionnality is implemented now?

Are we able to filter the route exchange between areas?

Regards

Rémi

Re: OSPF Inbound Route Filter

rob.burgoyne — Wed, 31 Oct 2012 19:56:19 GMT

Let me know if you find an answer to this.

Thanks,

Re: OSPF Inbound Route Filter

mikand — Thu, 01 Nov 2012 07:34:22 GMT

Doesnt seem like that, not according to the PAN-OS_4.1_CLI_Reference_Guide.pdf

Hopefully some SE could step in here and give a hint if this is taken care of in the PANOS 5.0 which is released shortly?

Re: OSPF Inbound Route Filter

rob.burgoyne — Thu, 01 Nov 2012 08:11:44 GMT

That sucks, it would be really nice to be able to easily filter routes based on Areas, not really how OSPF was designed but doesn't seem like it would be that hard for them to implement something like this.

Re: OSPF Inbound Route Filter

santonic — Fri, 02 Nov 2018 08:02:48 GMT

Anyone knows if this feature has been implemented in any of the later releases? I can't find anything new on this subject, but I'm still hopeful...