From: Sharma, Praveen (Praveen.Sharma@spansion.com)
Date: Wed Jan 28 2009 - 19:35:41 ARST
Thanks Jason,
I tested it with and without ip unreachable.
It is working the same way as you have explained below.
Praveen
________________________________
From: Jason Madsen [mailto:madsen.jason@gmail.com]
Sent: Wednesday, January 28, 2009 1:29 PM
To: Sharma, Praveen
Cc: ccielab@groupstudy.com
Subject: Re: IEWB Lab13 Vol 2 - Task 7.1
...by using "no ip unreachables" attempted pings (for example) would
just time out, rather than respond with U.U.U.U. the user wouldn't know
if the address doesn't exist or else exists and is filtered by ACL etc.
Jason
On Wed, Jan 28, 2009 at 2:22 PM, Jason Madsen <madsen.jason@gmail.com>
wrote:
haven't seen that lab, but it sounds like using "no ip unreachables".
if icmp is denied by an ACL, people may get U.U.U.U otherwise.
Jason
On Wed, Jan 28, 2009 at 2:16 PM, Sharma, Praveen
<Praveen.Sharma@spansion.com> wrote:
Hi GS,
I got confused with this statement in access-list example
"Silently Discard packet that denied".
To be more specific it is Vol II 4.1 Lab 13 7.1.
Thanks
Praveen
Blogs and organic groups at http://www.ccie.net <http://www.ccie.net/>
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:40 ARST