Forum Discussion
OSPF redistribute kernel uses 127.1.1.1 forward address
Just out of curiosity have you tried apply a route-map to filter outbound advertisements so that only the intended self/floating IP's are advertised? Not sure where the 127 address is coming from without seeing your entire config but this would be a quick way to prevent it from being advertised.
- Paedrig_69869Oct 04, 2016Nimbostratus
Thanks Fred, some testing has indicated that redistributing kernel routes with a route map that sets the next hop IP does change the behavior of the forward address.
I would imagine that using this in conjunction with a prefix list would allow only the desired addresses to be advertised though we haven't tested to this extent yet.
If there are specific things about our config that you think would be worth verifying please let me know and I'll see if I can post them.
- Fred_WittenbergOct 04, 2016Historic F5 Account
Hi Paedrig, correct - you wouldn't necessarily need to set the next-hop however, simply filtering the outbound advertisement should work as intended. You can use both next-hop and the outbound filter in combination for the desired effect. Also, I would suggest as a best practice to filter inbound out the adjacent router, this would prevent any error advertisements in both directions.
Something like this should do the trick:
redistribute kernel route-map virtual-addresses-out
access-list virtual-addresses permit x.x.x.x/xx
route-map virtual-addresses-out permit 10 match ip address virtual-addresses
If you want to upload you config to iHealth and/or open a case I'd be happy to take a look at your config.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com