RE: Preventing an EIGRP/OSPF Neighbor Forming

From: tj.mitchell (tj.mitchell@verizon.net)
Date: Wed Nov 30 2005 - 18:38:51 GMT-3


What about a distribute-list based on gateway? Just don't allow the gateway
you don't want to form an adjacency with.

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Ed
Lui
Sent: Wednesday, November 30, 2005 11:17 AM
To: Mike Ollington
Cc: Paul Borghese; ccielab@groupstudy.com
Subject: Re: Preventing an EIGRP/OSPF Neighbor Forming

Mike,

How about putting a different authentication key and/or password on
172.16.1.3 ?
Would that work ?

> > 172.16.1.1
> > 172.16.1.2
> > 172.16.1.3 <- I temporarily want to prevent this neighbour.
> > 172.16.1.4

Thanks,

Ed Lui

On 11/30/05, Mike Ollington <Mike.Ollington@uk.didata.com> wrote:
> Ed,
>
> That would be changing for it the whole area thus affecting all the
> neighbors.
>
> Ronald's `neighbor ip-address database-filter all out' command would
> work fine for OSPF. Thanks Ronald.
>
> Cheers,
> Mike
>
> -----Original Message-----
> From: Ed Lui [mailto:edwlui@gmail.com]
> Sent: 30 November 2005 15:52
> To: Mike Ollington
> Cc: Paul Borghese; ccielab@groupstudy.com
> Subject: Re: Preventing an EIGRP/OSPF Neighbor Forming
>
> Mike,
>
> Are you allowed to use OSPF authentication ?
>
> Ed Lui
>
>
>
> On 11/30/05, Mike Ollington <Mike.Ollington@uk.didata.com> wrote:
> > Paul,
> >
> > Changing those values would break all neighbours on an interface,
> > anything to kill just the one?
> >
> > For example:
> >
> > 172.16.1.1
> > 172.16.1.2
> > 172.16.1.3 <- I temporarily want to prevent this neighbour.
> > 172.16.1.4
> >
> > Thanks,
> > Mike
> >
> > -----Original Message-----
> > From: Paul Borghese [mailto:pborghese@groupstudy.com]
> > Sent: 30 November 2005 15:10
> > To: Mike Ollington
> > Cc: ccielab@groupstudy.com
> > Subject: Re: Preventing an EIGRP/OSPF Neighbor Forming
> >
> > In OSPF a neighbor relationship will not be formed if any of the
> > following
> > mismatch:
> >
> > hello/dead interval
> > area id
> > stub flag
> > authentication
> > subnet mask
> > mtu
> >
> > So for example, if you change the hello interval on one side, the
> > neighbor
> > will not form. You can see this by doing a "debug ip ospf adj".
> >
> > For EIGRP, you can try changing the K values or Autonomous System
> > number.
> > EIGRP will for a relationship even if the hello values do not match.
> >
> > Take care,
> >
> > Paul Borghese
> >
> > > Hello,
> > >
> > >
> > >
> > > Hypothetical - you have an interface with many EIGRP/OSPF
> neighbours.
> > > You want to prevent one; you don't want to use an interface access
> > list.
> > >
> > >
> > >
> > > In BGP there is the neighbour shutdown command, PIM has a neighbour
> > > list. Any thing similar for OSPF or EIGRP?
> > >
> > >
> > >
> > > Thanks,
> > >
> > > Mike
> > >
> >
> >
> >
> >
> > **********************************************************************
> > This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they are
> addressed. If you have received this email in error please notify the
> system manager.
> >
> > Although Dimension Data has taken reasonable precautions to ensure no
> viruses are present in this email, the company cannot accept
> responsibility for any loss or damage arising from the use of this email
> or attachments.
> >
> > www.uk.didata.com
> > **********************************************************************
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Thu Dec 01 2005 - 09:12:08 GMT-3