Configuring prefix suppression
By default, an OSPFv3 interface advertises all of its prefixes in LSAs. To speed up OSPFv3 convergence, you can suppress interfaces from advertising all of their prefixes. This function helps improve network security by preventing IP routing to the suppressed networks.
When prefix suppression is enabled:
OSPFv3 does not advertise the prefixes of suppressed interfaces in Type-8 LSAs.
On broadcast and NBMA networks, the DR does not advertise the prefixes of suppressed interfaces in Type-9 LSAs that reference Type-2 LSAs.
On P2P and P2MP networks, OSPFv3 does not advertise the prefixes of suppressed interfaces in Type-9 LSAs that reference Type-1 LSAs.
IMPORTANT: If you want to use prefix suppression, as a best practice, configure prefix suppression on all OSPFv3 routers. | ||
Configuring prefix suppression for an OSPFv3 process
Enabling prefix suppression for an OSPFv3 process does not suppress the prefixes of loopback interfaces and passive interfaces.
To configure prefix suppression for an OSPFv3 process:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter OSPFv3 view. | ospfv3 [ process-id | vpn-instance vpn-instance-name ] * | N/A |
3. Enable prefix suppression for the OSPFv3 process. | prefix-suppression | By default, prefix suppression is disabled for an OSPFv3 process. |
Configuring prefix suppression for an interface
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter interface view. | interface interface-type interface-number | N/A |
3. Enable prefix suppression for the interface. | ospfv3 prefix-suppression [ disable ] [ instance instance-id ] | By default, prefix suppression is disabled on an interface. |