Re: OSPF TTL Security

Funny the more people you run into these days days the more we learn about a
lot of minnows needing to go back and learn to swim.

->Shrug<-

On Wed, Apr 27, 2011 at 7:48 AM, Scott Morris <swm_at_emanon.com> wrote:

> I'll have to agree with Marko on this one. There are LOTS of cool
> pieces parts and commands that we use in real-world deployments of one
> technology or another. However, no matter how cool they are, depending
> on the box and/or release they are working on, they have no bearing
> whatsoever on the CCIE lab.
>
> This combination of stuff can be daunting enough as people are just
> getting into it. I don't see any need in muddying the waters until we
> figure out how to truly swim. THEN worry about the other stuff.
>
> Between Marko, or I, or any number of other people around here, I'm sure
> we can all come up with a slew of cool things from real-life. However,
> you have to ask what the value is in talking about that stuff? "Neat,
> but irrelevant" does not help you pass your lab exam!
>
> Would have been a great topic for the famed "OT:" marking though! :)
>
>
>
>
> *Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider) #4713,
>
> CCDE #2009::D, JNCIE-M #153, JNCIE-ER #102, CISSP, et al.
>
> CCSI #21903, JNCI-M, JNCI-ER
>
> swm_at_emanon.com
>
>
> Knowledge is power.
>
> Power corrupts.
>
> Study hard and be Eeeeviiiil......
>
>
> On 4/26/11 1:17 PM, Marko Milivojevic wrote:
> > This is an awesome option to be aware of in a security conscious
> > network, no doubt. There are also countless others. Since this is a
> > study list with the primary focus on CCIE Lab preparation, I think
> > it's very important to keep an eye on that.
> >
> > Cisco Live is indeed in July and we're all looking forward hanging
> > around in CCIE lounge and attending CCIE party :-)
> >
> > --
> > Marko Milivojevic - CCIE #18427
> > Senior Technical Instructor - IPexpert
> >
> > FREE CCIE training: http://bit.ly/vLecture
> >
> > Mailto: markom_at_ipexpert.com
> > Telephone: +1.810.326.1444
> > Web: http://www.ipexpert.com/
> >
> > On Tue, Apr 26, 2011 at 11:12, Darby Weaver <darby.weaver_at_gmail.com>
> wrote:
> >> Recall guys...B Some of are actually production engineers and we work
> in the
> >> real world with real networks.
> >>
> >> This is a nice option to be aware of and Cisco Live is in July....
> >>
> >> Darby
> >>
> >> http://www.darbyslogs.blogspot.com
> >>
> >>
> >>
> >> On Tue, Apr 26, 2011 at 1:38 PM, Steve Di Bias <sdibias_at_gmail.com>
> wrote:
> >>> Well I guess that's why I didn't know this command then, because I read
> >>> most of the OSPF 12.4T config guide and didn't remember seeing it!
> Thanks
> >>> Marko!
> >>>
> >>> On Tue, Apr 26, 2011 at 10:32 AM, Marko Milivojevic <
> markom_at_ipexpert.com>
> >>> wrote:
> >>>> I would just like to point out that this is not an option available in
> >>>> the IOS version specified to be in the lab (12.4T). While it's
> >>>> certainly very interesting, at this time students preparing for the
> >>>> CCIE R&S lab need not be concerned with it... Once the IOS is updated
> >>>> to 15.1, yes :-).
> >>>>
> >>>> --
> >>>> Marko Milivojevic - CCIE #18427
> >>>> Senior Technical Instructor - IPexpert
> >>>>
> >>>> FREE CCIE training: http://bit.ly/vLecture
> >>>>
> >>>> Mailto: markom_at_ipexpert.com
> >>>> Telephone: +1.810.326.1444
> >>>> Web: http://www.ipexpert.com/
> >>>>
> >>>> On Tue, Apr 26, 2011 at 09:51, Darby Weaver <darby.weaver_at_gmail.com>
> >>>> wrote:
> >>>>> At your service sir!
> >>>>>
> >>>>> I thought it was noteworthy and often over-looked...
> >>>>>
> >>>>> Know your options.
> >>>>>
> >>>>> Darby
> >>>>>
> >>>>> http://www.darbyslogs.blogpsot.com
> >>>>>
> >>>>> Keep in touch Steve.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>> On Tue, Apr 26, 2011 at 11:35 AM, Steve Di Bias <sdibias_at_gmail.com>
> >>>>> wrote:
> >>>>>
> >>>>>> Wow, I knew BGP implemented a command like this, but had no idea
> about
> >>>>>> this
> >>>>>> within OSPF. Thanks!
> >>>>>>
> >>>>>>
> >>>>>> On Tue, Apr 26, 2011 at 8:22 AM, <darby.weaver_at_gmail.com> wrote:
> >>>>>>
> >>>>>>> Anyone want to discuss this topic?
> >>>>>>>
> >>>>>>> ttl-security all-interfaces [hops hop-count]
> >>>>>>>
> >>>>>>> ip ospf ttl-security [hops hop-count | disable]
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> http://www.cisco.com/en/US/docs/ios/iproute_ospf/configuration/guide/iro_ttl.html
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_ospf/configuration/guide/iro_ttl_xe.pdf
> >>>>>>>
> >>>>>>>
> >>>>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>>>
> >>>>>>>
> >>>>>>>
> _______________________________________________________________________
> >>>>>>> Subscription information may be found at:
> >>>>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>> --
> >>>>>> -Steve Di Bias
> >>>>>>
> >>>>>
> >>>>>
> >>>>> --
> >>>>> Darby Weaver
> >>>>> Network Engineer
> >>>>>
> >>>>>
> >>>>> darbyweaver_at_yahoo.com
> >>>>>
> >>>>>
> >>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>
> >>>>>
> _______________________________________________________________________
> >>>>> Subscription information may be found at:
> >>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>
> >>>
> >>> --
> >>> -Steve Di Bias
> >>
> >>
> >> --
> >> Darby Weaver
> >> Network Engineer
> >>
> >>
> >> darbyweaver_at_yahoo.com
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Darby Weaver
Network Engineer
darbyweaver_at_yahoo.com
Blogs and organic groups at http://www.ccie.net