I know I said earlier this doesn't work, but I was doing some other testing in the lab today, and we use IS-IS as our IGP, so I decided to play with this for fun.....
IOS is 12.0(23)S1, on a 12016, the neighbor is a Cat6k-MSFC2 running 12.1(8a)E5, adjacency is across SRP, so YMMV.... router isis advanced redistribute connected route-map ISIS_Deny_Redist net 49.2901.1720.3124.0065.00 metric-style wide no hello padding ! route-map ISIS_Deny_Redist deny 10 match ip address ISIS-test ! route-map ISIS_Deny_Redist permit 20 ! ip access-list standard ISIS-test permit 172.30.150.0 The routes we're redistributing.... CR1ADVMO#sh ip ro connected 66.0.0.0/8 is variably subnetted, 13 subnets, 4 masks C 66.189.240.16/28 is directly connected, GigabitEthernet9/0 C 66.189.240.32/28 is directly connected, SRP1/0 C 66.189.240.128/28 is directly connected, FastEthernet2/4 C 66.189.240.252/30 is directly connected, FastEthernet2/0 172.31.0.0/32 is subnetted, 10 subnets C 172.31.240.65 is directly connected, Loopback0 172.30.0.0/16 is variably subnetted, 18 subnets, 6 masks C 172.30.150.0/30 is directly connected, POS7/2 C 172.30.159.252/30 is directly connected, POS6/0 Let's go find a neighbor..... CR1ADVMO#sh clns is-neighbors System Id Interface State Type Priority Circuit Id Format TS1ADVMO SR1/0 Up L1L2 64/64 TSK1ADVMO.02 Phase V SWC1ADVMO Fa2/4 Up L1L2 64/64 SWC1ADVMO.04 Phase V SWC1ADVMO Gi9/0 Up L1L2 64/64 SWC1ADVMO.03 Phase V ER1ADVMO Fa2/0 Up L1L2 64/64 ER1ADVMO.01 Phase V TSK1ADVMO SR1/0 Up L1L2 64/64 TSK1ADVMO.02 Phase V And the neighbors routes? SWC1ADVMO#sh ip ro 172.30.150.0 % Subnet not in table SWC1ADVMO#sh ip ro 172.31.240.65 Routing entry for 172.31.240.65/32 Known via "isis", distance 115, metric 20, type level-1 Redistributing via isis Last update from x.x.x.x on Vlan4, 01:06:02 ago Routing Descriptor Blocks: * x.x.x.x, from 172.31.240.65, via Vlan5 Route metric is 20, traffic share count is 1 x.x.x.x, from 172.31.240.65, via Vlan4 Route metric is 20, traffic share count is 1 So, it looks like it works after all. If I have time later in the week I'll try and mock it up on some of the smaller gear... HTH, sorry for the misinformation earlier... John ----- Original Message ----- From: "Cisco Nuts" To: Sent: Friday, February 07, 2003 9:46 AM Subject: Distribute-list out in ISIS - NOT working!!....Why?? [7:62641] > Hello,I am trying to use a distribute-list out serial 1 in > isis...basically blocking an Ospf route from being leaked into the Isis > domain. It lets me type in the commands but when I do a show run, the > commands are not there!! Why??On the neighboring isis router, I do not > even get an option to set the distribute-list in??Now I know, in Ospf the > distribute-list out does not work but did not know about this in Isis?Can > anyone shed light on this? I had to use a redistribute connected with a > route-map option.Here is my config:R3-B(config)#router isis > R3-B(config-router)#distribute-list 51 out serial 1 > R3-B(config-router)#endR3-B#rbr > router isis > redistribute connected metric 3 route-map serial level-1 > redistribute rip metric 3 level-1 > net 00.0000.0000.0003.00 > is-type level-1 Thank you.Sincerely,CN > > ------------------------------------------------------------------------ > > Help STOP SPAM with the new MSN 8 and get 2 months FREE* Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62672&t=62672 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]