From: Mike Kraus \(mikraus\) (mikraus@cisco.com)
Date: Tue Jul 10 2007 - 11:33:23 ART
You cannot filter router initiated traffic with an ACL. You could
potentially use PBR to change the behavior of router initiated traffic,
but I'd say that in the scenario below, as already stated the network
statement with the specific net mask would be the way to go.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
George Roman
Sent: Tuesday, July 10, 2007 8:50 AM
To: Dan C; ccielab@groupstudy.com
Subject: Re: do not send Eigrp Hello on interfaces
Dan,
I completely agree with you, but i assumed that in case you want to
advertise some other interfaces into eigrp and you do not want to send
eigrp packets on that interfaces, just adding the 0.0.0.0 for those ip
addresses, will not stop eigrp from sending hellos on them so you have
to filter eigrp.
Let me give you an example:
You have router R1 with the following interfaces:
s0: 1.1.1.1
s1: 2.2.2.2
R2:
s0:1.1.1.2
s1:3.3.3.3
You enable eigrp between R1 and R2 and on r1 you want to advertise
network
2.2.2.2 so you put into router eigrp : network 2.2.2.2 0.0.0.0
this last command does not stop R1 from sending eigrp packets on the s1
interface so if you want to filter this hellos, you have to specify
"passive-interface serial1", which is not an option in this case, or
filter with an extended acl the eigrp protocol. Am i right?
George
On 7/10/07, Dan C <cdan2154@gmail.com> wrote:
>
> Hi George,
>
> If you need to add any other interfaces into eigrp you will need just
> to use 0.0.0.0 for them again eg:
>
> router ei 100
> net 1.1.1.1 0.0.0.0
> net 1.1.2.1 0.0.0.0
>
> this way no hellos will be sent out but on those 2 interfaces.... You
> can verify using debug eigrp packets hello Cheers, Dan
>
> On 7/10/07, George Roman <georgeroman@gmail.com> wrote:
>
> > You are right about that. if you put the wildcard mask of 0.0.0.0
> > only that interface will participate in eigrp process, but if you
> > want some other networks (on other interfaces) to get advertised
> > into eigrp, i think the
> >
> > only solution is to put those interfaces in eigrp and use ACLs so
> > you will not send hellos on them (ACLs because as Cristian said, the
> > passive-interface command is forbidden).
> >
> > George
> >
> > On 7/10/07, Mark Mckillop (mmckillo) < mmckillo@cisco.com> wrote:
> > >
> > > I think the point is to use the 0.0.0.0 in the network statement
> > > to specify just the precise interfaces that you want enabled in
> > > the EIGRP
> >
> > > process.
> > >
> > > i.e. network 150.1.1.1 0.0.0.0 -> Just the interface with that
> > specific
> > > address
> > >
> > > Mark.
> > >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> > > Behalf
> > Of
> > > George Roman
> > > Sent: 10 July 2007 12:32
> > > To: Cristian Ionescu; ccielab@groupstudy.com
> > > Subject: Re: do not send Eigrp Hello on interfaces
> > >
> > > I think one of the options that you have to filter eigrp is
> > > extended
> > acl
> > > (specify the protocol eigrp)
> > >
> > > George
> > >
> > > On 7/10/07, Cristian Ionescu <cristian.ionescu@omnilogic.ro>
wrote:
> > > >
> > > > Hi
> > > >
> > > > I have a task where it says to not send eigrp hello on
> > > > interfaces
> > that
> > >
> > > > are not part of the eigrp domain but not to use
passive-interface.
> > > > It is ok to use neighbor?
> > > > I have 4 routers on domain. I need to put in one router all 3
> > > > other routers?
> > > >
> > > > If i put under the router eigrp x menu, network y.y.y.y 0.0.0.0
> > > > will have the same result?
> > > >
> > > > Thanks
> > > >
> > > >
> > ____________________________________________________________________
> > __
> > > > _ Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> > ____________________________________________________________________
> > ___
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> > ____________________________________________________________________
> > ___ Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Aug 18 2007 - 08:17:40 ART