Home > Articles > Certification > Cisco Certification > CCNP

This chapter is from the book 

Route Filtering Using the distribute-list Command

Router(config)#router eigrp 10

Starts the EIGRP routing process for autonomous system 10

Router(config-router)#distribute-list 1 in

Creates an incoming global distribute list that refers to access control list (ACL) 1

Router(config-router)#distribute-list 2 out

Creates an outgoing global distribute list that refers to ACL 2

Router(config-router)#distribute-list 3 in fastethernet0/0

Creates an incoming distribute list for interface FastEthernet0/0 and refers to ACL 3

Router(config-router)#distribute-list 4 out serial0/0/0

Creates an outgoing distribute list for interface Serial0/0/0 and refers to ACL 4

Router(config-router)#distribute-list 5 out ospf 1

Filters updates advertised from OSPF process ID 1 into EIGRP autonomous system 10 according to ACL 5

Configuration Example: Inbound and Outbound Distribute List Route Filters

Figure 4-5 shows the network topology for the configuration that follows, which demonstrates how to configure inbound and outbound route filters to control routing updates using the commands covered in this chapter. Assume that all basic configurations and EIGRP routing have been configured correctly.

Figure 4-5

Figure 4-5 Network Topology for Inbound and Outbound Distribute List Route Filters

The first objective is to prevent router AYLMER from learning the 10.0.0.0/8 network using an outbound distribute list on router HULL.

HULL(config)#access-list 10 deny 10.0.0.0 0.255.255.255

Creates a standard ACL number 10 and explicitly denies the 10.0.0.0/8 network

HULL(config)#access-list 10 permit any

Adds a second line to ACL 10 which permits all other networks

HULL(config)#router eigrp 1

Enters EIGRP autonomous system 1 routing process

HULL(config-router)#distribute-list 10 out

Or

Creates an outbound global distribute list that refers to ACL 10

HULL(config-router)#distribute-list 10 out serial0/0/0

Creates an outgoing distribute list for interface Serial0/0/0 that refers to ACL 10

The second objective is to prevent router OTTAWA from learning the 192.168.6.0/24 network using an inbound distribute list on router OTTAWA.

OTTAWA(config)#access-list 20 deny 192.168.6.0 0.0.0.255

Creates a standard ACL number 20 and explicitly denies the 192.168.6.0/24 network

OTTAWA(config)#access-list 20 permit any

Adds a second line to ACL 20 which permits all other networks

OTTAWA (config)#router eigrp 1

Enters EIGRP autonomous system 1 routing process

OTTAWA(config-router)#distribute-list 20 in

Or

Creates an inbound global distribute list that refers to ACL 20

OTTAWA(config-router)#distribute-list 20 in serial0/0/0

Creates an inbound distribute list for interface Serial0/0/0 that refers to ACL 20

Configuration Example: Controlling Redistribution with Outbound Distribute Lists

Figure 4-6 shows the network topology for the configuration that follows, which demonstrates how to control redistribution with an outbound distribute list using the commands covered in this chapter. Assume that all basic configurations and EIGRP and OSPF routing have been configured correctly.

Figure 4-6

Figure 4-6 Network Topology for Controlling Redistribution with Outbound Distribute Lists

The objective is to prevent networks 172.16.3.0/24 and 172.16.4.0/24 from being redistributed into the OSPF domain.

HULL(config)#access-list 30 permit 172.16.1.0 0.0.0.255

Creates a standard ACL number 30 and explicitly permits the 172.16.1.0/24 network.

HULL (config)#access-list 30 permit 172.16.2.0 0.0.0.255

Adds a second line to ACL 30 that explicitly permits the 172.16.2.0/24 network.

HULL(config)#router ospf 1

Enters OSPF process ID 1 routing process.

HULL(config-router)#redistribute eigrp 10 subnets

Redistributes all EIGRP networks into OSPF.

HULL(config-router)#distribute-list 30 out eigrp 10

Creates an outbound distribute list to filter routes being redistributed from EIGRP into OSPF.

NOTE: The implicit β€œdeny any” state-ment at the end of the access list pre-vents routing updates about any other network from being advertised. As a result, networks 172.16.3.0/24 and 172.16.4.0/24 will not be redistributed into OSPF.

Verifying Route Filters

Router#show ip protocols

Displays the parameters and current state of active routing protocols

Routing Protocol is "eigrp 10"
  Outgoing update filter list for all interfaces is 2
   Redistributed ospf 1 filtered by 5
    Serial 0/0/0 filtered by 4
  Incoming update filter list for all interfaces is 1
    FastEthernet0/0 filtered by 3

The command distribute-list out works only on the routes being redistributed by the ASBR into OSPF. It can be applied to external type 2 and external type 1 routes but not to intra-area and interarea routes.

InformIT Promotional Mailings & Special Offers

I would like to receive exclusive offers and hear about products from InformIT and its family of brands. I can unsubscribe at any time.