Successfully pass the free certification exam at IW Academy and become an Infinet Certified Engineer.
Description
OSPF is the dynamic routing protocol based on channel state tracking technology and uses the Dijkstra algorithm to find a shortest path. The OSPF protocol distributes information about available routes between routers in one network. Basic of a current protocol version are outlined in RFC 2328.
NOTE
In case OSPF traffic is processed by the switch group with SVI interface attached you can only use the IP address assigned to SVI interface to establish neighbor relationships with other devices.
If you have to use the physical interface to establish OSPF neighbor relationships using IP address assigned to Ethernet interface there are two options:
- Interface must be added to a switch group with no SVI attached (make sure traffic is not processed by another switch group).
- Interface must not be included into any switch group.
Same principles work for other protocols that use broadcast / multicast packets (RIP, DHCP).
The OSPF subsystem has it's own command shell (CS). CS is available only when OSPF daemon is started.
To enter CS use the "ospf" command. Commands in CS are not case-sensitive and can be shortened until ambiguity appears. To get a quick hint you can press "?" at any time.
The command shell has a number of modes:
The current mode is displayed along with the command prefix in the form "OSPF(mode)#". Initially, the CS is in the basic mode, which parameters are only for viewing the router current state. In order to switch the configuration mode you should have superuser rights. After entering a configuration mode, the configuration is being blocked and entering in this mode from other terminal (e.g. other telnet session) is prohibited. In order to avoid a "dead" block of the session, CS automatically quits the configuration mode after two minutes of no activity. The "end" command allows to exit any mode.
The transition scheme between different modes of CS:

Commands may have different arguments, which are specified in several formats. Arguments format is described in the context help ("?") or in the list of commands ("help") in the following way:
- "A.B.C.D" – IP-address (ex, 192.168.0.15).
- "WORD" – a set of characters with no spaces.
- "<1-N>" – a decimal number in a range from 1 to N.
- "A.B.C.D/M" – a parameter is set in a format IP address/subnet mask length – an integer in range 0...32 (ex. 192.168.0.0/24).
- "IFNAME" – name of a physical network interface (ex. eth0).
Hints in the command syntax can also show possibility of using different kind of formats. If an argument can be written in different formats, it will be displayed in round brackets, options are separated by "|" character. Example: "(A.B.C.D|<0-4294967295>)". If an argument is optional, it is put into square brackets: "[]". Any parameter may have "no" prefix, it will remove a corresponding parameter from the configuration.
Syntax:
configure Configuration end End current mode and change to root mode (CTRL+C). exit Back to WANFlex command shell (CTRL+D). help Print command list show Show running system information access-list List IP access lists border-routers show all the ABR's and ASBR's database Database summary interface Interface information memory Memory statistics neighbor Neighbor list ospf OSPF information prefix-list Build a prefix list route OSPF routing table running-config running configuration summary-address OSPF Possible external addresses summarizations thread Thread information version Displays version OSPF(config)# access-list Add an access list entry alias Set symbolic mode clear Reset functions debug Set debugging print level end End current mode and change to root mode (CTRL+C). exit Back to WANFlex command shell (CTRL+D). help Print command list interface Select an interface to configure no Negate a command or set its defaults prefix-list Build a prefix list route-map Create route-map or enter route-map command mode router Enable a routing process show Show running system information stop stop OSPF(config-if)# authentication Enable authentication on this interface authentication-key Authentication password (key) cost Interface cost dead-interval Interval after which a neighbor is declared dead description Interface specific description end End current mode and change to root mode (CTRL+C). exit Back to WANFlex command shell (CTRL+D). hello-interval Time between HELLO packets help Print command list message-digest-key Message digest authentication password (key) mtu Interface DD mtu network Network type no Negate a command or set its defaults priority Router priority retransmit-interval Time between retransmitting lost link state advertisements show Show running system information transmit-delay Link state transmit delay OSPF(config-router)# abr-type Set OSPF ABR type area OSPF area parameters authentication Enable authentication default-cost Set the summary-default cost of a NSSA or stub area export-list Set the filter for networks announced to other areas filter-list Filter networks between OSPF areas import-list Set the filter for networks from other areas announced to the specified one nssa Configure OSPF area as nssa range Summarize routes matching address/mask (border routers only) shortcut Configure the area's shortcutting mode stub Configure OSPF area as stub virtual-link Configure a virtual link auto-cost Calculate OSPF interface cost according to bandwidth auto-interface Auto announce mode compatible OSPF compatibility list default-information Control distribution of default information default-metric Set metric of redistributed routes distance Define an administrative distance distribute-list Filter networks in routing updates end End current mode and change to root mode (CTRL+C). exit Back to WANFlex command shell (CTRL+D). help Print command list log-adjacency-changes Log changes in adjacency state network Enable routing on an IP network no Negate a command or set its defaults passive-interface Suppress routing updates on an interface redistribute Redistribute information from another routing protocol refresh Adjust refresh parameters router-id router-id for the OSPF process show Show running system information summary-address distribute summary address timers Adjust routing timers OSPF(config-route-map)# end End current mode and change to root mode (CTRL+C). exit Back to WANFlex command shell (CTRL+D). help Print command list match Match values from routing table no Negate a command or set its defaults on-match Exit policy on matches route-map Create route-map or enter route-map command mode set Set values in destination routing protocol show Show running system information
Parameters
Parameter | Description |
---|---|
start | Starts OSPF daemon. |
help | Displays the whole command list for the current mode. |
end | Goes back from the current mode to the basic OSPF mode, keyboard shortcut Ctrl+C can also be used. |
exit | Exit from OSPF CS, keyboard shortcut Ctrl+D can also be used. |
show | Allows to review current running router configuration.
|
configure | Allows to enter the "OSPF configure" mode. |
OSPF configure mode | |
alias | Set a symbolic name to a router interface. Aliases are saved after the session end. |
debug level N | Adds OSPF debug information to the system log.
|
interface IFNAME | Entering the "config-if" mode. For more information about this mode see the "OSPF config-if mode" subsection.
|
router | Entering the "config-router" mode. For more information about this mode see the "OSPF config-router mode" subsection. |
route-map WORD (deny|permit) <1-65535> | Allows to create the route-map. The OSPF command shell will be switched to route-map configuration mode.
Route-map is a conditional records set. Records are viewed in order from first to last. Each record is decribed by following parameters:
For more information about this mode see the "OSPF config-route-map mode" subsection. |
stop (daemon|clear) | Stops the OSPF daemon:
|
access-list | Access lists are used in the router's settings as filters, in addition, they are also used to set the matching conditions in the route map configuration. Access lists consist of a set of operators. Each operator consists of an IP addresses range (matching conditions) and resulting action: "deny" or "permit". The IP-addresses range is set as "<value> <mask>". The object to be filtrated has its basic parameter in the same format (IP-address, subnet etc). To make a decision whether the object corresponds with a list, each operator from the list is consequently applied to the object basic parameter until this parameter satisfies the condition. When a right condition is met, the reviewing is stopped, the decision is made according to the record in the operator command. While configuring, the operators are added to the end of the list. Thus, when filtering, the sequence of viewing access list operators is determined only by the sequence of their addition. There are three access lists type in the OSPF router.
For more information about managing access lists commands see the "Filtration objects" subsection. |
prefix-list | Prefixes lists, same as access lists, are used as filters in a router's configuration and works on the same principles, however, they have a number of differences in the operators. First, besides the range and solution each operator can have also a sequential number (1-4294967295), which are used to sort the lists. It allows to manage the operators view sequence when filtering objects. If a sequential number is not specified the router sets it up automatically by adding 5 to the number of the last operator in a list. Thus, the operator will have the biggest number and will be placed in the end of the list. Secondly, the length mask can be used as the filtering condition.
For more information about managing prefix-lists commands see the "Filtration objects" subsection. |
clear alias|prefix-list WORD | Clears the OSPF configuration.
|
OSPF config-router mode | |
router-id | Allows to assign an identifier to this OSPF router. Every OSPF router has a unique identifier. Identifier is a 32-bit integer. If identifier was not set by administrator, the router will automatically assign an identifier which equals to a maximal (by value) IP address from all router's IP addresses participating in OSPF system. NOTE Since it is extremely important for OSPF to have constant Router ID which not change during operation (ex. by adding new or changing / deleting IP addresses), the identifier is assigned from the range of multicast addresses (224.x.x.x prefix) by using the device serial number. |
passive-interface IFNAME | Allows to manage a routing information updates. Suppresses the routing updates over some interfaces, but allows to exchange updates through other interfaces in normal mode.
|
auto-cost reference-bandwidth <1-4294967> | Allows to modify the "reference_bandwidth" value, "<1-4294967>" – Mbit/s parameter value in range 1-4294967. Link metric is a cost of traffic delivery through the network interface. OSPF router automatically calculates an internal link cost taking physical interface’s capacity to which link belongs: M = reference_bandwidth/bandwidth:
This metric configuration method is used for all links for which interfaces a specific cost is not set. |
network A.B.C.D/M area (A.B.C.D|<0-4294967295>) | Allows router to advertise an internal link to the system. Internal links are links which destinations are the subnets to which a router is connected directly (using one of its network interfaces) and which are described in OSPF router configuration. In order to advertise an internal link, a subnet should be specified which destination is an advertised link. If none of router’s network interfaces has an IP address from specified subnet, OSPF will not advertise this link although this network will be in configuration (inactive link). When administrator will connect one of the interfaces to this network with the "ifconfig" command, this network will automatically become a OSPF routing member. Using the "no" prefix before this parameter allows to cancel the channel advertisement.
|
auto-interface IFNAME area (A.B.C.D|<0-4294967295>) | Allows to advertise internal links automatically for the selected network interface. It becomes important when interface IP addresses (aliases) are created and deleted automatically, for example, when CPEs are connecting to the BS via radio.
|
redistribute (kernel|connected|static|rip) [metric <0-16777214>] [metric-type (1|2)] [route-map WORD] | Allows router to advertise external links. Redistributed routes are classified by:
|
distribute-list WORD out (kernel|connected|static) | Allows to define criteria a router will use to advertise the link according with access-list filter.
|
default-metric <0-16777214> | Allows to set the default metric value for all external channels. If default metric is not defined, it equals 1. |
default-information originate [always] [metric-type (1|2)] [metric <0-16777214>] [route-map WORD] | By default, in the "redistribute kernel" mode the router will not make an advertisement into OSPF system about having as a link to default gateway, even if it is clearly written in the routing table by the administrator. This parameter allows the default route advertisement.
|
summary-address A.B.C.D/M [metric-type (1|2)] [metric <0-16777214>] | Sets a summary address for the external routes that are injected into the OSPF domain by "redistribute” command.
|
refresh timer <10-1800> | The router automatically updates link-state information with its neighbors. Only an obsolete information is updated which age has exceeded a specific threshold. This parameter changes a threshold value, which by default is 1800 seconds (half an hour). The value is applied to the whole OSPF router.
|
log-adjacency-changes [detail] | Enables to log changes in the adjacency state.
|
compatible rfc1583 | Sets the RFC 1583 standard compliance mode. |
distance (intra-area|inter-area|external) <1-255> | Sets an administrative distance value in range 1...255 for following route types:
|
OSPF areas | |
area (A.B.C.D|<0-4294967295>) shortcut (default|enable|disable) | OSPF protocol has an ability to join adjacent networks and hosts into special groups. This group along with a router that has a link to one (any) of the networks included into the group is called an area. In each area an independent copy of OSPF is functioning. That means that each area has its own database and a corresponding graph.
Each area is assigned a unique identifier area-id. An area with area-id equal to zero is called a backbone of OSPF system. OSPF backbone area always includes all ABR. Backbone area is responsible for routing information distribution between other (non-backbone) areas. Backbone area should be contiguous but it does not always imply a physical adjacency – backbone connections can be organized using virtual connections. This parameter allows to "shortcut" routes (non-backbone) for inter-area routes. There are three modes available for routes shortcutting:
|
area (A.B.C.D|<0-4294967295>) stub [no-summary] | This parameter allows to configure a stub area. Some areas may be defined as stub areas. It is used for an area which has either a single ABR or several ABR but route selection does not depend on external destination address. The information about external link (to OSPF system) is not sent to stub areas by ABR. Instead, ABR advertises a default gateway to the stub area with a route coming through this ABR.
|
area (A.B.C.D|<0-4294967295>) nssa [translate-always|translate-candidate|translate-never|no-redistribution|suppress-fa] [no-summary] | Allows to set the OSPF area as not-so-stubby area (NSSA). Such area retains advantages of stub area, and allows external routes advertisement. Routers within this area exchange LSA-7 type packets, which the ABR will retransmit to other areas.
|
area (A.B.C.D|<0-4294967295>) default-cost <0-16777215> | Sets summary links default metric for stub and NSSA areas. |
area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.D | Provides a backbone area coherence by virtual link establishment. In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized.
Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area. |
area (A.B.C.D|<0-4294967295>) {[export-list|import-list] NAME} {[filter-list prefix] WORD (in|out)} | Provides link information filtering for the area. If the filter conditions match, the information will be discarded.
|
area (A.B.C.D|<0-4294967295>) range A.B.C.D/M [not-advertise] [cost <0-16777215>] substitute A.B.C.D/M | Allows you to configure the link aggregation and announcements suppression. For every area to which OSPF router is connected there is a list of address ranges for link aggregation before sending a summary LSA to a backbone area. Aggregated links are checked to belong to one of the address ranges. If several links belong to one address range, ABR makes an advertisement to the backbone (or to other areas) of only one single link with destination equal to the address range and a metric equal to the maximal metric of all links or equal to the specified for this range value. It is possible to announce that some range is a blocking one, and then advertising of links which belong to this range will be blocked. When advertising an aggregated backbone link to other (non-backbone) areas, the aggregation will not be performed if the area to which backbone links are advertised is a transit area (it has virtual links). The list of addresses ranges for the area consists of the records with following fields:
If non-advertise flag is not specified, C and Rs parameters can be configured. If a destination for one or more links belongs to R, the router will advertise one link with R destination (or Rs, if specified) and with metric that is a maximal metric of links (or C, if specified). |
area (A.B.C.D|<0-4294967295>) authentication [message-digest] | Authentication type can be specified for the whole area to which a network belongs, and to a link by which OSPF packets are received. If authentication is turned on for both interface and the area, the interface authentication type will be used. So if an interface has a "null" authentication type, then no authentication is performed. This parameter sets the authentication type for the whole area to which network and link belong.
As was mentioned before, area authentication type is applied only if interface’s authentication was totally disabled. |
area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.D {authentication-key AUTH_KEY|message-digest-key <1-255> md5 KEY} | Allows to configure virtual links authentication.
|
area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.D (hello-interval|retransmit-interval|transmit-delay|dead-interval) <1-65535> | Establishes neighboring relationship between two routers when virtual links are used.
|
abr-type (cisco|ibm|shortcut|standard) | Selects ABR model. OSPF router supports four ABR models:
Detailed information about "cisco" and "ibm" models differences can be found in RFC 3509. A "shortcut" model allows ABR to create routes between areas based on the topology of the areas connected to this router but not using a backbone area in case if non-backbone route will be "cheaper". For more information about "shortcut" model, see ospf-shortcut-abr-02.txt |
Config-if mode | |
authentication-key AUTH_KEY [A.B.C.D] | In order to prevent an unauthorized connection of routers to OSPF system, the system has an identity check for protocol’s packets. This parameter allows to set simple password authentication. Authentication can be configured individually for each interface’s link (or for the interface including virtual link) and/or individually for every area to which the router is connected. By default authentication is disabled.
|
message-digest-key <1-255> md5 KEY [A.B.C.D] | Allows to set digest key authentication.
|
authentication (null|message-digest) A.B.C.D | Allows to enable one or another authentication mode after setting its parameters.
|
dead-interval <1-65535> [A.B.C.D] hello-interval <1-65535> [A.B.C.D] | When two or more routers have links to the same network these routers become neighbors in order to synchronize their Link-State Database. Moreover, a network with more than one router connected to it is a transit network; and, if this network is not point-to-point network, it is an active OSPF object (it can advertise its links to the routers). A special designated router makes an LSA. A designated router is selected from a number of active OSPF routers connected to the network based on their priorities, identifiers and IP addresses of network interfaces by means of which they are connected to the network. The router uses special protocols which parameters should be identical for neighbors. These parameters are: "hello-interval" – an interval of sending "hello-packets" and "dead-interval" – the time interval during which from a neighbor at least one "hello-packet" must be received, after this time, the neighboring router is excluded from the list of neighbors. By default, "hello-interval" is 10 seconds, "dead-interval" is 40 seconds. These parameters allow to specify a different value for these parameters for any network interface.
|
priority <0-255> [A.B.C.D] | Allows to set up router’s priority for the interface. One of routers connected to the network is automatically selected to be a designated router (DR) judging by three parameters. If a link priority is specified for the router it acts as a major criterion for DR selection. If priority is not set, only router-id and IP address affect the selection.
|
retransmit-interval <3-65535> [A.B.C.D] | Allows to control retransmits periodicity for each interface and/or interface’s links. OSPF protocol requires that Link-State databases of one area routers should be identical. To do that routers exchange LSA information. In particular, transit networks are used. In order to minimize network traffic, routers exchange their LSA not directly with each other but using DR and Backup DR (BDR). BDR is used for backing up DR in case of DR failure. BDR selection rules are identical to DR selection rules. While Link-state database synchronization routers exchange database descriptions using master-slave relationship and broadcast IP packets. Each packet reception should be acknowledged. If acknowledge is not received, initiating party makes a series of retransmits.
|
transmit-delay <1-65535> [A.B.C.D] | Allows to set and adjust for each interface the delay interval before starting the synchronizing process of the router's database with all neighbors.
|
cost <1-65535> [A.B.C.D] | Sets links metric (cost) of the interface.
|
network | Allows to specify the distribution type for the network connected to this interface:
|
description | Adds interface description. |
mtu <40-65535> | Sets MTU value. |
OSPF config-route-map mode | |
match address[(<1-199>|<1300-2699>|WORD)]|prefix-list WORD]|interface WORD|next-hop[(<1-199>|<1300-2699>|WORD)|prefix-list WORD] | Sets matching conditions for the imported route. For each record several conditions can be set. If several conditions are specified they are applied according to the "and" rule.
|
set metric <0-4294967295>|metric-type (type-1|type-2) | Sets link metric value and/or type, if the route matches all conditions.
|
on-match (goto <1-65535>)|next | Sets behavior scenario, if the route matches all conditions.
|
Filtration objects
Access lists
The following "config" mode parameters are used to create or modify access lists for an OSPF router.
Standard list:
access-list (<1-99>|<1300-1999>) (deny|permit) A.B.C.D A.B.C.D
- "(<1-99>|<1300-1999>)" – list identifier.
- "(deny|permit)" – resulting action.
- "A.B.C.D A.B.C.D" – IP address range in "<value> <mask>" form.
This parameter creates an operator in a standard access list. Value and mask define a range (criteria) for the operator. The mask defines those bits of the value which form the range. For example, in order to specify the range of IP address from 192.168.12.0 to 192.168.255, the "192.168.12.0" value and the "0.0.0.255" mask should be specified. For value and mask of 0.0.0.0 255.255.255.255 there is a key word "any". Commands below are equal.
OSPF(config)# access-list 1 permit 0.0.0.0 255.255.255.255 OSPF(config)# access-list 1 permit any
For the range which consists of only one address, the key word "host" is used. Commands below are equal.
OSPF(config)# access-list 1 permit 192.168.12.150 0.0.0.0 OSPF(config)# access-list 1 permit host 192.168.12.150
Extended list:
access-list (<100-199>|<2000-2699>) (deny|permit) ip A.B.C.D A.B.C.D A.B.C.D A.B.C.D
- "(<100-199>|<2000-2699>)" – list identifier.
- "(deny|permit)" – resulting action.
- "A.B.C.D A.B.C.D" – source IP address range.
- "A.B.C.D A.B.C.D" – destination IP address range.
Nominate list:
access-list WORD (deny|permit) A.B.C.D/M exact-match
- "WORD" – list identifier.
- "(deny|permit)" – resulting action.
- "A.B.C.D/M" – IP address range.
"exact-match" – is used for the exact match of a parameter to the range.
Prefix-lists
prefix-list WORD seq <1-4294967295> (deny|permit) A.B.C.D/M ge <0-32> le <0-32>
- "WORD" – list identifier.
- "seq <1-4294967295>" – sequential number.
- "(deny|permit)" – resulting action.
- "A.B.C.D/M" – IP address range.
"exact-match" – is used for the exact match of a parameter to the range.
"ge <0-32> le <0-32>" – allowed mask values range.
Examples
Assigne the "192.168.103.36" router id in the OSPF(config-router) mode. OSPF(config-router)# router-id 192.168.103.36 Cancel the assignment using the "no" prefix. no router-id |
In the "TestList1" nominate list, set deny action for the 192.168.12.0...192.168.12.255 IP-address range, the "192.168.12.0/24" value should be entered. Also add the decision to accept packets from all other addresses. OSPF(config)# access-list TestList1 deny 192.168.12.0/24 OSPF(config)# access-list TestList1 permit any |
Enable advertisement an internal link to the "192.168.103.37/24" network which located in a backbone area. There are two ways how to solve this task. OSPF(config-router)# network 192.168.103.37/24 area 0.0.0.1 OSPF(config-router)# network 192.168.103.37/24 area 1 |
Display the neighbour state information. OSPF> show neighbor Neighbor ID Pri State Dead Time Address Interface RXmtL RqstL DBsmL 224.3.94.78 1 Full/Backup 00:00:26 192.168.103.36 svi1:192.168.1 The table contains following data:
|
Display database for links which were announced by transit network, and the advertising router was "192.168.45.107". OSPF> show database network adv-router 192.168.45.107 OSPF Router with ID (192.168.151.10) Net Link States (Area 0.0.0.0) Net Link States (Area 0.0.0.1) LS age: 473 Options: 0x2 : *|-|-|-|-|-|E|* LS Flags: 0x6 LS Type: network-LSA Link State ID: 192.168.15.1 (address of Designated Router) Advertising Router: 192.168.45.107 LS Seq Number: 80000001 Checksum: 0x9148 Length: 32 Network Mask: /24 Attached Router: 192.168.45.107 Attached Router: 192.168.151.1 Net Link States (Area 0.0.0.2) |
Display a routing table by using "show route" command. OSPF> show route ============ OSPF network routing table ============ N IA 1.1.1.1/32 [3] area: 0.0.0.1 via 192.168.15.1, eth0 N IA 1.1.1.2/32 [2] area: 0.0.0.1 via 192.168.15.1, eth0 N 4.7.8.0/24 [2] area: 0.0.0.1 via 192.168.15.1, eth0 N IA 9.1.1.0/24 [12] area: 0.0.0.1 via 192.168.15.1, eth0 N IA 192.168.0.0/24 [3] area: 0.0.0.1 via 192.168.15.1, eth0 N 192.168.15.0/24 [1] area: 0.0.0.1 directly attached to eth0 N IA 192.168.80.0/24 [12] area: 0.0.0.1 via 192.168.15.1, eth0 N 192.168.151.0/24 [1] area: 0.0.0.1 directly attached to eth0 N IA 192.168.152.0/24 [2] area: 0.0.0.1 via 192.168.151.10, eth0 N IA 195.38.45.64/26 [2] area: 0.0.0.1 via 192.168.15.1, eth0 ============ OSPF router routing table ============= R 192.168.151.10 [1] area: 0.0.0.1, ABR, ASBR via 192.168.151.10, eth0 R 195.38.45.107 [1] area: 0.0.0.1, ABR via 192.168.15.1, eth0 ============ OSPF external routing table =========== N E2 192.168.200.0/24 [1/7] tag: 0 via 192.168.151.10, eth0 The table consists of following data:
|
In the following configuration, the router advertises external links created from the system routing table "connected" routes with metric type 2. If a destination for this route is a "192.168.103.37/24" subnetwork, the formed link will have metric 7, any other destination will not lead to external link’s advertising it. OSPF(config)# access-list ANYNET permit any OSPF(config)# access-list net200 permit 192.168.103.37/24 OSPF(config)# route-map MAP permit 10 OSPF(config-route-map)# match address net200 OSPF(config-route-map)# set metric 7 OSPF(config-route-map)# route-map MAP deny 11 OSPF(config-route-map)# match address ANYNET OSPF(config-route-map)# router OSPF(config-router)# redistribute connected route-map MAP |