From: ccie anees (ccieanees@yahoo.com)
Date: Mon Nov 20 2006 - 23:33:56 ART
R1 --- ethernet segment - R2
1. R1 and R2 is running RIP. Ensure that rogue hosts running RIP on the ethernet segment (VLAN 10) can not intercept RIP packets?
2. R1 and R2 is running EIGRP. Ensure that rogue hosts running EIGRP on the ethernet segment (VLAN 10) can not intercept EIGRP packets?
3. R1 and R2 is running BGP. Ensure that rogue hosts running BGP on the ethernet segment (VLAN 10) can not intercept BGP packets?
4. R1 and R2 is running OSPF. Ensure that rogue hosts running OSPF on the ethernet segment (VLAN 10) can not intercept OSPF packets?
I am seeing different solutions for different protocols in the work book.
The solutions I noticed are
1. Vlan access-map on the switch attached to vlan 10. (EIGRP, BGP)
2. access-list on the switch's fastethernet port.
2. passive-interface default and use neighbor <ip address> (RIP)
I am confused with these different answers. Is there any one common best solution?
Can I use authentication on the routing protocol? will that prevent the rogue intercept issue?
Thanks,
Anees.
---------------------------------
Sponsored Link
Degrees for working adults in as fast as 1 year. Bachelors, Masters, Associates. Top schools
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:48 ART