From: Brittan Walker (brwalker@xxxxxxxxx)
Date: Thu Aug 16 2001 - 09:22:59 GMT-3
I was working in the lab last night on ISDN and OSPF.
I have included the following basic commands I was using.
I was trying to block all hellos and updates. My thought
process was based on the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/np1_c
/1cprt1/1cospf.htm#xtocid709123
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/np1_c
/1cprt1/1cospf.htm#xtocid709128
When I would do a sh int, the BRI would be up, up (spoofing).
When I would do a debug ip ospf packets & events, I would
continue to see updates from networks on the other side of the
ISDN link. I also tried adding passive-interface bri0. CDP
is disabled in this case.
Based on the URL above, this should do it. The dialer-list
permits ip. Should I set up an access list to block OSPF
hellos and updates? Let me know what you think.
Brit
int bri0
ip ospf demand-circuit
ip ospf network non-broadcast
ip ospf database-filter all out
router ospf 100
neighbor 172.16.35.1 priority 0
area 5 nssa
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:51 GMT-3