OSPF Inbound Route Filter

[adevine]

Hi,

I see in the admin guide that it is possible to filter the default route so that it is not learnt by the OSPF process.

Is there any way of applying a more granular filter so that I can restrict the Palo Alto OSPF process to only learn 10.0.0.0/8 routes?  Similiar to an inbound Cisco distribute-list?

Cheers

[pkruse · Accepted solution]

With the current iteration of the product we do not provide that level of granularity, if this is an important feature you can take it up with your local SE and have a feature request submitted.

[kbrazil]

Depending on the topology we might be able to do this with a redistribution profile attached to an export filter on whatever protocol you are redistributing into OSPF. 

There is no way to reliably restrict routes within the OSPF LSA database itself - that's not how it's designed to work. (That is, it's not a distance-vector protocol that allows you to directly manipulate the routing table).

Cheers,

Kelly

[rroger]

Hello,

Is this functionnality is implemented now?

Are we able to filter the route exchange between areas?

Regards

Rémi

[rob.burgoyne]

Let me know if you find an answer to this.

Thanks,

[mikand]

Doesnt seem like that, not according to the PAN-OS_4.1_CLI_Reference_Guide.pdf

Hopefully some SE could step in here and give a hint if this is taken care of in the PANOS 5.0 which is released shortly?

[rob.burgoyne]

That sucks, it would be really nice to be able to easily filter routes based on Areas, not really how OSPF was designed but doesn't seem like it would be that hard for them to implement something like this.

[santonic]

Anyone knows if this feature has been implemented in any of the later releases? I can't find anything new on this subject, but I'm still hopeful...