Example: Configuring Export Rules in a Virtual Router (NSM Procedure)
In this example, you export OSPF routes for the 1.1.1.1/24 network in the trust-vr virtual router to the untrust-vr routing domain. You first create an access list for the network prefix 1.1.1.1/24, which is then used in the route map “ rtmap1” to filter for matches of routes for the 1.1.1.1/24 network. You then create a route export rule to export matching OSPF routes from the trust-vr to the untrust-vr virtual router.
To configure export rules in a virtual router:
- In the NSM navigation tree, select Device Manager > Devices. Double-click the device object to open the device configuration.
- In the device navigation tree, select Network > Virtual Routers.
- Double-click the trust-vr virtual router. The General Properties screen appears.
- Configure the access list:
- In the virtual router navigation tree, select Access List, then click the Add icon in the main display area. The Access List Entries/New dialog box appears.
- For Access List Number, enter 2.
- In the Access List Entries area, click the Add icon. The
New Access List Entry dialog box appears. Configure the following,
and then click OK:
- For Sequence Number, enter 10.
- For Action, select Permit.
- For Prefix, select Prefix to Filter and enter the IP address/netmask 1.1.1.1/24.
- Configure the route map:
- In the virtual router navigation tree, select Route Map, and then click the Add icon in the main display area. The New Route Map dialog box appears.
- For Name, enter rtmap1.
- In the Route Map Entry area, click the Add icon. The New Route-Map Entry dialog box appears.
- Configure the following way:
- For Sequence Number, enter 10.
- For Action, select permit.
- In the Match Properties area, in the access list table, select 2.
- Leave all other defaults and click OK to save the new route map entry.
- Configure the export rule:
- In the virtual router navigation tree, select Export Rules, and then click the Add icon in the main display area. The New Export Rule dialog box appears.
- For Export to Virtual Router, select untrust-vr.
- For Route Map, select rtmap1.
- For Protocol, select OSPF.
- Click OK to save the new export rule.
- Click OK to save your changes to the virtual router, and then click OK again to save your changes to the device configuration.
In this example, you configure the trust-vr to automatically export all routes to the untrust-vr. You also configure a route map on the untrust-vr to permit only internal OSPF routes.
To configure trust-vr:
- In the NSM navigation tree, select Device Manager > Devices. Double-click the device object to open the device configuration.
- In Device Manager, double-click a device icon to open the device configuration. In the device navigation tree, select Network > Virtual Routers.
- Configure the export rule for the trust-vr:
- Double-click the trust-vr virtual router. The General Properties screen appears.
- Select Auto-export route to untrust-vr.
- Click OK to save your changes to the trust-vr.
- Configure the route map for the untrust-vr.
- Double-click the trust-vr virtual router. The General Properties screen appears.
- In the virtual router navigation tree, select Route Map, and then click the Add icon in the main display area.
- For Name, enter from-ospf-trust.
- In the Route Map Entry area, click the Add icon. The New
Route-Map Entry dialog box appears.
- For Sequence Number, enter 10.
- For Action, select permit.
- In the Match Properties area, in the Route Type table, select Internal OSPF.
- Click OK to save the new route map entry, and then click OK again to save the route map.
- Click OK to save your changes to the virtual router, and then click OK again to save your changes to the device configuration.
