topic Re: OSPF and ACL in Procurve 3400 in Switches, Hubs, and Modems

OSPF and ACL in Procurve 3400

Stefan Claesson — Thu, 26 Oct 2006 07:06:18 GMT

I wonder if there is "anybody out there" who has been dealing with OSPF and ACL's in Procurve 3400 switches. My problem is that the switch stops reciving OSPF packets when I apply an ACL on an interface that participate in the OSPF routing domain. I believe that ACL's in 3400 doesn't support OSPF packets (there is no entry for like in 5300/5400). Do anybody knows any workaround for this?

Re: OSPF and ACL in Procurve 3400

Matt Hobbs — Thu, 26 Oct 2006 07:33:40 GMT

I actually ran into this problem yesterday. I didn't get time to test it out fully but what I think you can do is simply add the required OSPF multicast addresses to your ACL, 224.0.0.5 and 224.0.0.6, or add the entire multicast class to be permitted:

permit ip 0.0.0.0 255.255.255.255 224.0.0.0 31.255.255.255

I hope my subnet calculations are correct...

Re: OSPF and ACL in Procurve 3400

Matt Hobbs — Thu, 26 Oct 2006 08:02:06 GMT

I've tested it out now, seems to be working fine.

Re: OSPF and ACL in Procurve 3400

Stefan Claesson — Thu, 26 Oct 2006 08:49:33 GMT

Will that work?? What about the fact that OSPF has a different IP Protocol Number than "normal" IP Packets!! or doesn't the switch care about that?

Re: OSPF and ACL in Procurve 3400

Matt Hobbs — Thu, 26 Oct 2006 09:05:34 GMT

It's simply IP, the 3400's ACL's can't distinguish between the different IP protocol numbers so it allows them all.

Re: OSPF and ACL in Procurve 3400

Stefan Claesson — Thu, 26 Oct 2006 10:05:04 GMT

OK, thank you for your answer. I will test this as soon as I get my hands on the network. I will keep in contact with you.
Kind regards,
Stefan Claesson