Re: Filter list and access list?

From: Dan Shechter <danshtr_at_gmail.com>
Date: Wed, 20 Jan 2010 08:43:21 +0200

Hi Raj,

Regarding to the lab, the all-times-favorite, filtering odd or even numbers
can't be done using filter-lists.

Best regards,
Dan #13685 (RS/Sec/SP)
Troubleshooting blog: http://dans-net.com

On Sat, Jan 9, 2010 at 4:04 PM, andy thomas <thomasandy32_at_gmail.com> wrote:

> Hello
>
> Diagram:
> ISP-1 ISP-1
> |
> |
> |
> |
> CORE-1-------------CORE-2
> |
> |
> |
> |
> |
> |
> PE-2 PE-1
> 10.28.40.41/29 | |
> 10.28.40.33/29
> | |
> .42 | |
> .34
> firewall-2
> firewall-1
> |
> |
> |
> |
>
> ----------------------------------
> |
> WEB SERVER (10.10.10.1)
>
> I want to route traffic to web server I'm using static routes pointing to a
> respective next-hop on a particular router,the devices on customer end
> firewall is ASA, customer has asked for the preferred interface from
> firewall-1, i have configured that by increasing the local preference of
> the
> route
>
> The link between the distribution switches and the core is MPLS and the
> customer is configured in the VRF.
>
> Now the issue is:
>
> customer says that when the firewall-1 fails firewall-2 will be active by
> the same inside interface IP of firewall-1, if it so then all the traffic
> destined to web server from PE-2 to a next-hop 10.28.40.42 will drop,so in
> this situation what techniques we shld apply,The subnet between the 2
> firewall are different.
>
>
> Any link or configuration example which will help me.
> Thanks
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

2010/1/10 Nicolas Leiva <nicolasleiva_at_gmail.com>

> Hey Guys, was working on the free troubleshooting lab you posted and I
> realized of two minor details.
>
> 1. BB3's initial config has a typo:
>
> router bgp 9116
> bgp rouer-id 9.9.3.3
>
> 2. R5's interfaces are upside down on the diagram. F0/0 should be where
> F0/1 is and vice versa.
>
>
> That's it, just wanted to let you know...it's the least I can do..
>
> Keep up the excellent work
>
> Nicolas
> http://ccie-en-espanol.blogspot.com/
>

Best regards,
Dan #13685 (RS/Sec/SP)
Troubleshooting blog: http://dans-net.com

On Sat, Jan 9, 2010 at 4:04 PM, andy thomas <thomasandy32_at_gmail.com> wrote:

> Hello
>
> Diagram:
> ISP-1 ISP-1
> |
> |
> |
> |
> CORE-1-------------CORE-2
> |
> |
> |
> |
> |
> |
> PE-2 PE-1
> 10.28.40.41/29 | |
> 10.28.40.33/29
> | |
> .42 | |
> .34
> firewall-2
> firewall-1
> |
> |
> |
> |
>
> ----------------------------------
> |
> WEB SERVER (10.10.10.1)
>
> I want to route traffic to web server I'm using static routes pointing to a
> respective next-hop on a particular router,the devices on customer end
> firewall is ASA, customer has asked for the preferred interface from
> firewall-1, i have configured that by increasing the local preference of
> the
> route
>
> The link between the distribution switches and the core is MPLS and the
> customer is configured in the VRF.
>
> Now the issue is:
>
> customer says that when the firewall-1 fails firewall-2 will be active by
> the same inside interface IP of firewall-1, if it so then all the traffic
> destined to web server from PE-2 to a next-hop 10.28.40.42 will drop,so in
> this situation what techniques we shld apply,The subnet between the 2
> firewall are different.
>
>
> Any link or configuration example which will help me.
> Thanks
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

2010/1/10 Nicolas Leiva <nicolasleiva_at_gmail.com>

> Hey Guys, was working on the free troubleshooting lab you posted and I
> realized of two minor details.
>
> 1. BB3's initial config has a typo:
>
> router bgp 9116
> bgp rouer-id 9.9.3.3
>
> 2. R5's interfaces are upside down on the diagram. F0/0 should be where
> F0/1 is and vice versa.
>
>
> That's it, just wanted to let you know...it's the least I can do..
>
> Keep up the excellent work
>
> Nicolas
> http://ccie-en-espanol.blogspot.com/
>

On Wed, Jan 20, 2010 at 8:14 AM, HEMANTH RAJ <hemanthrj_at_gmail.com> wrote:

> Wat is the major difference between filter list and access list??
> Where is filter list is used ?
> where is access list is used?
>
> --
> Problems arise Bcoz we talk,prblms r not solve bcoz we dont talk So gud r
> bad talk to ur affectionate one's freely
>
> Urs Friendly,
> HP HEMANTH RAJ
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Jan 20 2010 - 08:43:21 ART

This archive was generated by hypermail 2.2.0 : Thu Feb 04 2010 - 20:28:41 ART