RE: new ACL usage ???

From: George Cassels (glcassels3@nc.rr.com)
Date: Sun Jun 05 2005 - 11:19:12 GMT-3


All is it safe to assume this must have been a routing protocol like RIP
or EIGRP that uses the interface IP as the source? So would it be safe
to assume (not that it is ever safe to assume :>) ) that if it was OSPF
we would have to use the router ID for the source? Also would be have
to use the DR as the source since it would be the one sending out the
update to the all ospf routers multicast address?

Plan to lab this up and test it with all protocols. If no one replies
will post results.

Sorry for the late post on this one...just catching up.

George

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
ccie2be
Sent: Thursday, May 12, 2005 1:24 PM
To: Group Study
Subject: new ACL usage ???

Hi guys,
 
Here's the scenario:
 
rtr-1 rtr-2 (rtr-3 to be added in the future)
  |---------------------|--------------|
   192.10.1.x/24 .253
 
Requirement: RTR-1 should only accept route 222.22.2.0 from this new
router
at ip addr 192.10.1.253/24 and not from rtr-2.
 
The Solution is below.
 
What stands out about this is the first acl entry. I've never seen an
acl
used this way. Is this documented anywhere on the Doc-CD?
 
Will this type of filtering work for other IGP's?
 
TIA, Tim
 
rtr-2
int e0
ip addr 192.10.1.2 255.255.255.0
 
 
rtr-1
int e0
ip addr 192.10.1.1 255.255.255.0
 
router rip
distribute-list 100 in Ethernet0/0
!
access-list 100 permit ip host 192.10.1.253 host 222.22.2.0
access-list 100 deny ip any host 222.22.2.0
access-list 100 permit ip any any



This archive was generated by hypermail 2.1.4 : Wed Jul 06 2005 - 14:43:40 GMT-3