ospf database-filter
Use ospf database-filter to filter outbound LSAs on an interface.
Use undo ospf database-filter to restore the default.
Syntax
ospf database-filter { all | { ase [ acl ipv4-acl-number ] | nssa [ acl ipv4-acl-number ] | summary [ acl ipv4-acl-number ] } * }
undo ospf database-filter
Default
The outbound LSAs are not filtered on the interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
all: Filters all outbound LSAs except the Grace LSAs.
ase: Filters outbound Type-5 LSAs.
nssa: Filters outbound Type-7 LSAs.
summary: Filters outbound Type-3 LSAs.
acl ipv4-acl-number: Specifies an IPv4 ACL by its number in the range of 2000 to 3999.
Usage guidelines
To use an advanced ACL (with a number from 3000 to 3999) in the command, configure the ACL using one of the following methods:
To deny/permit LSAs with the specified link state ID, use the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard command.
To deny/permit LSAs with the specified link state ID and mask, use the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr dest-wildcard command.
The source keyword specifies the link state ID of an LSA and the destination keyword specifies the subnet mask of the LSA. For the mask configuration to take effect, specify a contiguous subnet mask.
If the neighbor has already received an LSA to be filtered, the LSA still exists in the LSDB of the neighbor after you execute the command.
Examples
# Filter all outbound LSAs (except the Grace LSAs) on VLAN-interface 10.
<Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] ospf database-filter all
# On VLAN-interface 20, configure ACL 2000, 2100, and 2200 to filter outbound Type-5, Type-7, and Type-3 LSAs, respectively.
<Sysname> system-view [Sysname] interface vlan-interface 20 [Sysname- Vlan-interface20] ospf database-filter ase acl 2000 nssa acl 2100 summary acl 2200
Related commands
database-filter peer (OSPF view)