OT - Second Puzzle for CCIE R&S Students

From: Narbik Kocharians <narbikk_at_gmail.com>
Date: Fri, 22 Oct 2010 11:25:34 -0700

*One of the students told me that he did not see the second puzzle, so i am
posting my original post for the second one.*

The reason I asked to Unicast was so one student will not see the answer
from another student, this forces some people to lab the scenario and think.

*Now that I have your attention*, here are some solutions to the problem, I
am sure there are more ways, and please feel free to add to the list.

1. Filter all RIPs updates coming from R2 on R3 fa0/0 interface with
access-list/prefix-list/route-map and vice versa.
2. Filter the default route from R2 on R3 and vice versa.
3. Instead of filtering, you could also use the distance command and set it
to 255.
4. Filter default from R2 on R3, and R3 to R2 using an "Offset-list in".
5. Configure passive-interface on the F0/0 interfaces of R2 and R3, and then
on Both routers configure a "Neighbor R1".
6. Configure the ports that R2 and R3 are connected as "swi Protect".
7. Configure Private Vlan; configuring the F0/0 interface of R2 and R3 in
Isolated, and the F0/0 interface of R1 in primary.
8. Mac ACLs or an IP access-list and a Vlan Access-map that denies the two
routers from communicating.
9. Configuring an MQC that matches on the destination-address MAC and drops
that traffic in the policy-map that's assigned to the F0/0 interface of R2
and Vice versa.
10. Dropping the traffic by filtering the MAC on the switchports.
11. Put R2 and R3 in different subnets and do a "no validate-update source"
on R1.

*Now could you imagine the following scenario*: you are in a CCIE lab, and
you just finished the troubleshooting section, so you feel like Mike Tyson
because you did well, but the first question in the configuration section is
the following:

R1 is running RIPv2.
R6 is also running RIPv2.
There are bunch of routers between R1 and R6 running OSPF or whatever
routing protocol that turns you on.

I want R6 to get all R1s RIP routes.

Do not use redistribution, AToM, IPnIP or GRE tunnels to accomplish this.
Come up with 2 solutions. Common unicast me the solution..

There is a reason I am doing this, trust me.

--
Narbik Kocharians
CCSI#30832, CCIE# 12410 (R&S, SP, Security)
www.MicronicsTraining.com
Sr. Technical Instructor
YES! We take Cisco Learning Credits!
Training And Remote Racks available
Blogs and organic groups at http://www.ccie.net
Received on Fri Oct 22 2010 - 11:25:34 ART

This archive was generated by hypermail 2.2.0 : Mon Nov 01 2010 - 06:42:06 ART