From: mani poopal (mani_ccie@yahoo.com)
Date: Sun Apr 10 2005 - 10:51:48 GMT-3
Hi GS gurus,
In ISDN/OSPF dialer watch, what is the best combination of access-list for dialer group:
(A.)When they dont specify any thing;
access-list 101 deny ospf any any
access-list 101 permit ip any any
or
access-lisg 101 deny ip any any
(B)If ping supposed to work:
access-list 101 permit icmp any any
access-list 101 deny ospf any any
access-list 101 permit ip any any
or
access-list 101 permit icmp any any
(c.)DENY EVERY THING
access-list 101 deny ip any any<--EVERY THING IS DENIED(Includes multicast/dlsw etc)
NOW FOR THE QUESTION;
What is the best practise, is it
deny ospf any any
permit ip any any
OR
deny ip any any
Suggestions are appreciated.
Mani
B.ENG,A+,CCNA,CCNP,CCNP-VOICE, CSS1,CNA,MCSE
(416)431 9929
MANI_CCIE@YAHOO.COM
---------------------------------
Do you Yahoo!?
Yahoo! Small Business - Try our new resources site!
This archive was generated by hypermail 2.1.4 : Tue May 03 2005 - 07:54:55 GMT-3