hello Radek,
You can do the route add command as part of bringing up a network interface
We often put a separate loopback address  on an interface to make an
address available
via OSPF on our network...
if you add in a loopback interface with the /32 route and then add the
loopback interface to your ospf area in your ospfd.conf file

Note when you redistribute a static address it will appear as an
external route in the
The link state advertisements from the router ... (it wont be an intra
area route) which can affect the route metric during the route
selection process...

Thanks

Tom Smyth



Tom Smyth


On Wed, 8 Feb 2023 at 14:41, Radek <r...@int.pl> wrote:
>
> Hello Bradley,
> thank you, your setup works the way I need.
>
> I can't deal with adding the static route permanently. I have to add the 
> static route by hand (route add 10.1.111.11/32 10.1.111.1) after reboot.
> Did I missed something?
>
> [10.109.3.15] $ cat /etc/hostname.vr0
> -inet
> dhcp
> #inet 10.109.3.15 255.255.255.0
> !sleep 60
> !route add 10.1.111.11/32 10.1.111.1
>
> After reboot it looks like this:
>
> [10.109.3.15] $ route -n show
> Routing tables
>
> Internet:
> Destination        Gateway            Flags   Refs      Use   Mtu  Prio Iface
> default            10.109.3.254       UGS        5       15     -     8 vr0
> 224/4              127.0.0.1          URS        0       59 32768     8 lo0
> 10.1.100/24        10.1.100.1         Cn         0        0     -     4 vr1
> 10.1.100.1         00:00:24:cb:4f:cd  UHLl       0        0     -     1 vr1
> 10.1.100.255       10.1.100.1         Hb         0        0     -     1 vr1
> 10.1.111/24        10.1.111.1         UCn        1        0     -     4 vr3
> 10.1.111.1         00:00:24:cb:4f:cf  UHLl       0        3     -     1 vr3
> 10.1.111.11        00:00:24:cb:4f:d0  UHLc       0        2     -     3 vr3
> 10.1.111.255       10.1.111.1         UHb        0        0     -     1 vr3
> 10.1.222/24        10.109.3.16        UG         0        0     -    32 vr0
> 10.109.3/24        10.109.3.15        UCn        3       40     -     4 vr0
> 10.109.3.10        a4:bb:6d:d6:5a:a4  UHLc       1       29     -     3 vr0
> 10.109.3.15        00:00:24:cb:4f:cc  UHLl       0       13     -     1 vr0
> 10.109.3.16        00:00:24:cd:90:10  UHLch      1       26     -     3 vr0
> 10.109.3.254       00:0d:b9:35:39:29  UHLch      1       31     -     3 vr0
> 10.109.3.255       10.109.3.15        UHb        0        0     -     1 vr0
> 127/8              127.0.0.1          UGRS       0        0 32768     8 lo0
> 127.0.0.1          127.0.0.1          UHhl       1        2 32768     1 lo0
>
>
> On Tue, 7 Feb 2023 17:54:27 +1100
> Bradley Latus <brad.la...@gmail.com> wrote:
>
> > Hi all,
> >
> > I have done an experiment.
> >
> > If your interface is part of an area, it will be advertised always.
> >
> > If you wanted to advertise only /32 this is how I got mine to work.
> > Ensure your interface vr3 is not in your ospf area
> >
> > Add a static route to the one you wish to advertise, it appears that unless
> > a route exists on the machine you cannot redistribute a random ip.
> >
> > So  route add 10.1.111.11/32 10.1.111.1
> >
> > Then you can redistribute your /32
> >
> >
> >
> > router-id 10.109.3.15
> > redistribute 10.1.111.11/32
> >
> > area 0.0.0.0 {
> >   interface vr0
> > }
> >
> >
> >
> > On Tue, 7 Feb 2023, 02:46 Radek, <r...@int.pl> wrote:
> >
> > > Hello,
> > > > I’d check the databases on both sides.
> > > > And flush/reload the config and fibs.
> > > I reloaded and restarted OSPFd on both sides - nothing changes. Then, I
> > > rebooted routers on both sides - nothing changes.
> > > I still can see/ping the whole 10.1.111.0/24 subnet from the far end.
> > >
> > > [10.109.3.15]$ ospfctl show database router
> > >
> > >                 Router Link States (Area 0.0.0.0)
> > >
> > > LS age: 238
> > > Options: -|-|-|-|-|-|E|-
> > > LS Type: Router
> > > Link State ID: 10.109.3.15
> > > Advertising Router: 10.109.3.15
> > > LS Seq Number: 0x80000016
> > > Checksum: 0x6d0a
> > > Length: 48
> > > Flags: *|*|*|*|*|-|E|-
> > > Number of Links: 2
> > >
> > >     Link connected to: Stub Network
> > >     Link ID (Network ID): 10.1.111.0
> > >     Link Data (Network Mask): 255.255.255.0
> > >     Metric: 10
> > >
> > >     Link connected to: Transit Network
> > >     Link ID (Designated Router address): 10.109.3.16
> > >     Link Data (Router Interface address): 10.109.3.15
> > >     Metric: 10
> > >
> > > LS age: 239
> > > Options: -|-|-|-|-|-|E|-
> > > LS Type: Router
> > > Link State ID: 10.109.3.16
> > > Advertising Router: 10.109.3.16
> > > LS Seq Number: 0x80000016
> > > Checksum: 0xb058
> > > Length: 36
> > > Flags: *|*|*|*|*|-|E|-
> > > Number of Links: 1
> > >
> > >     Link connected to: Transit Network
> > >     Link ID (Designated Router address): 10.109.3.16
> > >     Link Data (Router Interface address): 10.109.3.16
> > >     Metric: 10
> > >
> > >
> > > [10.109.3.16]$ ospfctl show fib
> > > flags: * = valid, O = OSPF, C = Connected, S = Static
> > > Flags  Prio Destination          Nexthop
> > > *S        8 0.0.0.0/0            10.109.3.254
> > > *O       32 10.1.111.0/24        10.109.3.15
> > >
> > >
> > > On Sun, 5 Feb 2023 22:20:07 +0100
> > > Diederik Schouten <dsch...@high5.net> wrote:
> > >
> > > > Hello,
> > > >
> > > > I’d check the databases on both sides.
> > > > And flush/reload the config and fibs.
> > > > Then check again which link state advertisements are in the database.
> > > > To make sure you now get the /32 advertised.
> > > >
> > > > Sent from my iPhone
> > > >
> > > > > On 5 Feb 2023, at 21:15, Radek <r...@int.pl> wrote:
> > > > >
> > > > > Hello Diederik, hello Tom,
> > > > > this is a simple lab/testing configuration, that's why there is no
> > > "passive" and other...
> > > > > The purpose of this configuration is to allow access to certain IP
> > > address and restrict access to the rest of the subnet.
> > > > > I can use PF to block/pass what I need... but I'm trying make sure if
> > > I can do it by announcing "not more than needed" over OSPF.
> > > > >
> > > > > "redistribute 10.1.111.11/32" seems to be what I need, but probally I
> > > missed something, because this option doesn't work for me as expected.
> > > > >
> > > > > $ cat /etc/ospfd.conf
> > > > > router-id 10.109.3.15
> > > > > redistribute 10.1.111.11/32
> > > > >
> > > > > area 0.0.0.0 {
> > > > >        interface vr0
> > > > >        interface vr3
> > > > > }
> > > > >
> > > > > Then, I can still see/ping other IPs in 10.1.111.0/24 from the far
> > > end network.
> > > > >
> > > > > On the far router I can see the whole subnet instead of somthing like
> > > " *O       32 10.1.111.11/24        10.109.3.15".
> > > > >
> > > > > $ ospfctl show fib
> > > > > flags: * = valid, O = OSPF, C = Connected, S = Static
> > > > > Flags  Prio Destination          Nexthop
> > > > > *S        8 0.0.0.0/0            10.109.3.254
> > > > > *O       32 10.1.111.0/24        10.109.3.15
> > > > >
> > > > > Any clues?
> > > > >
> > > > >> On Sat, 4 Feb 2023 23:16:57 +0000
> > > > >> Tom Smyth <tom.sm...@wirelessconnect.eu> wrote:
> > > > >>
> > > > >> Hi Radek,
> > > > >>
> > > > >> it is better practice to add ospf network statements  to ospfd.conf
> > > > >> (if you dont want to send / recieve ospf messages on an interface set
> > > the
> > > > >> interface to passive in ospfd.conf
> > > > >> avoid redistribute connected
> > > > >> (add the network you want to be added to your ospf network) and leave
> > > the
> > > > >> other network ommitted from your ospfd.conf
> > > > >>
> > > > >>
> > > > >> I hope this helps,
> > > > >>
> > > > >>
> > > > >>> On Sat, 4 Feb 2023 at 20:02, Radek <r...@int.pl> wrote:
> > > > >>>
> > > > >>> Hello,
> > > > >>> is it possible to announce over OSPF only one (or a few specific) IP
> > > > >>> address instead of the whole subnet?
> > > > >>> If yes.. an ospfd.conf example would be appreciated.
> > > > >>>
> > > > >>> $ cat /etc/hostname.vr3
> > > > >>> inet 10.1.111.1 255.255.255.0
> > > > >>>
> > > > >>> $ cat /etc/ospfd.conf
> > > > >>> router-id 10.109.3.15
> > > > >>> redistribute connected
> > > > >>>
> > > > >>> area 0.0.0.0 {
> > > > >>>        interface vr0
> > > > >>>        interface vr3
> > > > >>> }
> > > > >>>
> > > > >>> Thanks,
> > > > >>> Radek
> > > > >>>
> > > > >>>
> > > > >>
> > > > >> --
> > > > >> Kindest regards,
> > > > >> Tom Smyth.
> > > > >
> > > > >
> > > > > Radek
> > > > >
> > > >
> > >
> > >
> > > Radek
> > >
> > >
>
>
> Radek
>


--
Kindest regards,
Tom Smyth.

Reply via email to