Two independent ospf areas on the ABR

Post Reply
Gucul
Member
Posts: 16
Joined: 12 Apr 2011 15:35

Two independent ospf areas on the ABR

Post by Gucul »

Hi everyone,
I have four 6855 switches and I need to create topology with two independent rings. So, I need to be sure ring1 can't ping ring2.
I created two ospf areas 1.1.1.1 and 2.2.2.2. Ring1 is area 1.1.1.1 and ring2 is area 2.2.2.2 accordingly. Both areas are configured as stub and with summary disabled.
But they still see each other.

What else I can do?

Please help.

Here is my ospf config:

! OSPF :
ip load ospf
ip ospf area 1.1.1.1
ip ospf area 1.1.1.1 type stub
ip ospf area 1.1.1.1 summary disable
ip ospf area 2.2.2.2
ip ospf area 2.2.2.2 type stub
ip ospf area 2.2.2.2 summary disable
ip ospf interface "vlan_10"
ip ospf interface "vlan_10" area 1.1.1.1
ip ospf interface "vlan_10" status enable
ip ospf interface "1/2"
ip ospf interface "1/2" area 1.1.1.1
ip ospf interface "1/2" status enable
ip ospf interface "1/1"
ip ospf interface "1/1" area 1.1.1.1
ip ospf interface "1/1" status enable
ip ospf interface "vlan_20"
ip ospf interface "vlan_20" area 2.2.2.2
ip ospf interface "vlan_20" status enable
ip ospf interface "1/10"
ip ospf interface "1/10" area 2.2.2.2
ip ospf interface "1/10" status enable
ip ospf interface "1/9"
ip ospf interface "1/9" area 2.2.2.2
ip ospf interface "1/9" status enable
ip ospf status enable

And here is my topology:
You do not have the required permissions to view the files attached to this post.
User avatar
cedric1
Member
Posts: 603
Joined: 26 May 2009 18:00
Location: Luxembourg ACSE R6

Re: Two independent ospf areas on the ABR

Post by cedric1 »

hello

Your topo is not coorect for what you want to do.
You can't filter redistribution between area 1 to 2 because you can't redis. ospf to ospf.

So I think in your design best is to elect one switch as a Layer 3 redundant with vrrp with a second one.

on L3 switch, use ACls with policy rule to filter traffic between network in area 1 and area 2. notice that I say area to define class of subnet here but you don't use ospf anymore.

Note that in AOS you bind an ospf interface to an ip interface not to a port as you have it done in your config /

port 1/9 and 1/10 are in vlan 10
vlan 10 as an ip interface int10.1 configured.

You need just to make ip ospf interface int10.1 .

Cedric
Post Reply

Return to “OmniSwitch 6855”