From: Michael Snyder (msnyder@revolutioncomputer.com)
Date: Wed Oct 06 2004 - 08:24:26 GMT-3
#3 is your best bet. Deny any any works every time. I've seen #1 cause
some weird problems, I think the ios programmers expect a dialer-group
to be present even if it's not used.
The second option can work, I've used it before.
R2
username R2 password 0 pass2
username R5 password 0 pass5
interface BRI0
ip address 150.50.9.2 255.255.255.192
encapsulation ppp
ip ospf cost 9999
ip ospf demand-circuit
dialer idle-timeout 60
dialer watch-disable 15
dialer map ip 150.50.9.5 name R5 broadcast 2221
dialer map ip 150.50.9.5 name R5 broadcast 2222
dialer load-threshold 3 outbound
no peer neighbor-route
dialer-group 3
isdn switch-type basic-net3
isdn spid1 1111
isdn spid2 1112
ppp authentication chap
ppp multilink
no shut
R5
username R5 password 0 pass2
username R2 password 0 pass5
!
interface BRI0
ip address 150.50.9.5 255.255.255.192
encapsulation ppp
ip ospf cost 9999
dialer idle-timeout 60
dialer map ip 150.50.9.2 name R2 broadcast
dialer-group 3
isdn switch-type basic-net3
isdn spid1 2221
isdn spid2 2222
ppp multilink
no peer neighbor-route
no shut
-----Original Message-----
From: none [mailto:alsontra@hotmail.com]
Sent: Tuesday, October 05, 2004 11:02 PM
To: ccielab@groupstudy.com
Subject: Disallowing Callout
In various ISDN scenarios you are sometimes asked to disallow one side
from
call the other. There a several ways of accomplishing this, but I'm
wondering if there is any functional difference between the following:
1. Removing the dialer-group from the ISDN interface
2. Removing the dialer string from the dialer map
3. Using only deny statements in your dialer-list ACL
Is there a reason to prefer one over the others or this situational?
Thanks
Alsontra
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:43 GMT-3