From: William Lijewski (ccie8642@hotmail.com)
Date: Thu Sep 25 2003 - 19:02:34 GMT-3
If you want to block routes, you don't want to apply an access-list to an
interface. The access-list on the interface will block traffic, not routing
updates. You would want to use the distribute-list outbound to the backbone
router. For RIP and EIGRP it would always be a distribute-list, and you
should always be specific as to which interface you are blocking the routing
updates:
distribute-list 1 out ethernet 0
If you are blocking BGP routes there are a couple of ways you can do it:
distribute-list, prefix-list, or filter-list depending on the requirements.
Again all of these should be a specific as possible with their application -
they should all go on neighbor statements.
You router that is directly attached to the Backbone router will still be
able to ping it since its ping by default will be sourced from its outgoing
(connected to the Backbone) interface. The Backbone router will know how to
get back to it. Unless there is a default route on the Backbone router no
other router would be able to ping it since the Backbone router wouldn't
have a return path (the directly connected router would not be able to ping
it either if you changed the source address of the ping).
Bill Lijewski
CCIE #8642
Network Learning Inc
5 Day R&S CCIE Bootcamp Instructor
>From: "Kaiser Anwar" <kaiseranwar@sbcglobal.net>
>Reply-To: "Kaiser Anwar" <kaiseranwar@sbcglobal.net>
>To: <ccielab@groupstudy.com>
>Subject: routes to backbones
>Date: Thu, 25 Sep 2003 16:48:41 -0500
>
>Hi,
> just came up with this, if I am told that I am not supposed to send
>any
>routes to backbone.
> what would be the best way to accomplish this.create an standard
>access
>list and apply to the bb interface or
> match it with distribute list and apply it in the routing process for
>rip
>or for bgp on neighbor. just little confused.
> in either of the case if an access list is applied. would I still be
>able to
>ping BB routes. or may there is a proper way to do it.
>
>
>Thanks
>Kaiser Anwar
>
>***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:37 GMT-3