Prefix list kullanarak route filtreleme mümkündür. Örneğin R5'teki Switch-2'deki routing tablosu şöyle olsun:
SW2#sh ip route ripR 222.22.2.0/24 [120/9] via 155.1.58.5, 00:00:02, Vlan58R 204.12.1.0/24 [120/2] via 155.1.58.5, 00:00:02, Vlan58
155.1.0.0/24 is subnetted, 10 subnets
R 155.1.146.0 [120/2] via 155.1.58.5, 00:00:02, Vlan58
R 155.1.13.0 [120/2] via 155.1.58.5, 00:00:02, Vlan58
R 155.1.0.0 [120/1] via 155.1.58.5, 00:00:02, Vlan58
R 155.1.5.0 [120/1] via 155.1.58.5, 00:00:02, Vlan58
R 155.1.45.0 [120/1] via 155.1.58.5, 00:00:02, Vlan58
R 155.1.37.0 [120/2] via 155.1.58.5, 00:00:02, Vlan58
R 155.1.67.0 [120/8] via 155.1.58.5, 00:00:03, Vlan58
R 220.20.3.0/24 [120/9] via 155.1.58.5, 00:00:03, Vlan58
54.0.0.0/24 is subnetted, 1 subnets
R 54.1.1.0 [120/8] via 155.1.58.5, 00:00:03, Vlan58
R 212.18.1.0/24 [120/9] via 155.1.58.5, 00:00:03, Vlan58
R 212.18.0.0/24 [120/9] via 155.1.58.5, 00:00:03, Vlan58
R 212.18.3.0/24 [120/9] via 155.1.58.5, 00:00:03, Vlan58
R 212.18.2.0/24 [120/9] via 155.1.58.5, 00:00:03, Vlan58
R 192.10.1.0/24 [120/2] via 155.1.58.5, 00:00:03, Vlan58
31.0.0.0/14 is subnetted, 1 subnets
R 31.0.0.0 [120/2] via 155.1.58.5, 00:00:03, Vlan58
150.1.0.0/24 is subnetted, 7 subnets
R 150.1.6.0 [120/8] via 155.1.58.5, 00:00:03, Vlan58
R 150.1.5.0 [120/1] via 155.1.58.5, 00:00:03, Vlan58
R 150.1.4.0 [120/2] via 155.1.58.5, 00:00:05, Vlan58
R 150.1.3.0 [120/2] via 155.1.58.5, 00:00:05, Vlan58
R 150.1.2.0 [120/2] via 155.1.58.5, 00:00:05, Vlan58
R 150.1.1.0 [120/2] via 155.1.58.5, 00:00:05, Vlan58
R 205.90.31.0/24 [120/9] via 155.1.58.5, 00:00:05, Vlan58
30.0.0.0/14 is subnetted, 1 subnets
R 30.0.0.0 [120/2] via 155.1.58.5, 00:00:05, Vlan58
30.0.0.0 ve 31.0.0.0 network'lerini routing tablosundan filtreleyelim. Access-List'lere benzer şekilde bir Pefix-List oluşturularak filtreleme yapılabilir.
R5(config)#ip prefix-list RIP_FILTER_TO_SW2 seq 5 deny 30.0.0.0/14
R5(config)#ip prefix-list RIP_FILTER_TO_SW2 seq 10 deny 31.0.0.0/14
R5(config)#ip prefix-list RIP_FILTER_TO_SW2 seq 15 permit 0.0.0.0/0 le 32
R5(config)#router rip
R5(config-router)#distribute-list prefix RIP_FILTER_TO_SW2 out fastEthernet 0/0
R5(config-router)#end
Bir süre sonra ilgili network'lerin routing tablosundan silindği görülür.
SW2#sh ip route 31.0.0.0
% Network not in table
SW2#sh ip route 30.0.0.0
% Network not in table
0 yorum:
Yorum Gönder