Re: OSPF TTL Security

I'll have to agree with Marko on this one. There are LOTS of cool
pieces parts and commands that we use in real-world deployments of one
technology or another. However, no matter how cool they are, depending
on the box and/or release they are working on, they have no bearing
whatsoever on the CCIE lab.

This combination of stuff can be daunting enough as people are just
getting into it. I don't see any need in muddying the waters until we
figure out how to truly swim. THEN worry about the other stuff.

Between Marko, or I, or any number of other people around here, I'm sure
we can all come up with a slew of cool things from real-life. However,
you have to ask what the value is in talking about that stuff? "Neat,
but irrelevant" does not help you pass your lab exam!

Would have been a great topic for the famed "OT:" marking though! :)

*Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider) #4713,

CCDE #2009::D, JNCIE-M #153, JNCIE-ER #102, CISSP, et al.

CCSI #21903, JNCI-M, JNCI-ER

swm_at_emanon.com

Knowledge is power.

Power corrupts.

Study hard and be Eeeeviiiil......

On 4/26/11 1:17 PM, Marko Milivojevic wrote:
> This is an awesome option to be aware of in a security conscious
> network, no doubt. There are also countless others. Since this is a
> study list with the primary focus on CCIE Lab preparation, I think
> it's very important to keep an eye on that.
>
> Cisco Live is indeed in July and we're all looking forward hanging
> around in CCIE lounge and attending CCIE party :-)
>
> --
> Marko Milivojevic - CCIE #18427
> Senior Technical Instructor - IPexpert
>
> FREE CCIE training: http://bit.ly/vLecture
>
> Mailto: markom_at_ipexpert.com
> Telephone: +1.810.326.1444
> Web: http://www.ipexpert.com/
>
> On Tue, Apr 26, 2011 at 11:12, Darby Weaver <darby.weaver_at_gmail.com> wrote:
>> Recall guys...B Some of are actually production engineers and we work in the
>> real world with real networks.
>>
>> This is a nice option to be aware of and Cisco Live is in July....
>>
>> Darby
>>
>> http://www.darbyslogs.blogspot.com
>>
>>
>>
>> On Tue, Apr 26, 2011 at 1:38 PM, Steve Di Bias <sdibias_at_gmail.com> wrote:
>>> Well I guess that's why I didn't know this command then, because I read
>>> most of the OSPF 12.4T config guide and didn't remember seeing it! Thanks
>>> Marko!
>>>
>>> On Tue, Apr 26, 2011 at 10:32 AM, Marko Milivojevic <markom_at_ipexpert.com>
>>> wrote:
>>>> I would just like to point out that this is not an option available in
>>>> the IOS version specified to be in the lab (12.4T). While it's
>>>> certainly very interesting, at this time students preparing for the
>>>> CCIE R&S lab need not be concerned with it... Once the IOS is updated
>>>> to 15.1, yes :-).
>>>>
>>>> --
>>>> Marko Milivojevic - CCIE #18427
>>>> Senior Technical Instructor - IPexpert
>>>>
>>>> FREE CCIE training: http://bit.ly/vLecture
>>>>
>>>> Mailto: markom_at_ipexpert.com
>>>> Telephone: +1.810.326.1444
>>>> Web: http://www.ipexpert.com/
>>>>
>>>> On Tue, Apr 26, 2011 at 09:51, Darby Weaver <darby.weaver_at_gmail.com>
>>>> wrote:
>>>>> At your service sir!
>>>>>
>>>>> I thought it was noteworthy and often over-looked...
>>>>>
>>>>> Know your options.
>>>>>
>>>>> Darby
>>>>>
>>>>> http://www.darbyslogs.blogpsot.com
>>>>>
>>>>> Keep in touch Steve.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Apr 26, 2011 at 11:35 AM, Steve Di Bias <sdibias_at_gmail.com>
>>>>> wrote:
>>>>>
>>>>>> Wow, I knew BGP implemented a command like this, but had no idea about
>>>>>> this
>>>>>> within OSPF. Thanks!
>>>>>>
>>>>>>
>>>>>> On Tue, Apr 26, 2011 at 8:22 AM, <darby.weaver_at_gmail.com> wrote:
>>>>>>
>>>>>>> Anyone want to discuss this topic?
>>>>>>>
>>>>>>> ttl-security all-interfaces [hops hop-count]
>>>>>>>
>>>>>>> ip ospf ttl-security [hops hop-count | disable]
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> http://www.cisco.com/en/US/docs/ios/iproute_ospf/configuration/guide/iro_ttl.html
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_ospf/configuration/guide/iro_ttl_xe.pdf
>>>>>>>
>>>>>>>
>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________________________________
>>>>>>> Subscription information may be found at:
>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> --
>>>>>> -Steve Di Bias
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Darby Weaver
>>>>> Network Engineer
>>>>>
>>>>>
>>>>> darbyweaver_at_yahoo.com
>>>>>
>>>>>
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>
>>>>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>
>>>
>>> --
>>> -Steve Di Bias
>>
>>
>> --
>> Darby Weaver
>> Network Engineer
>>
>>
>> darbyweaver_at_yahoo.com
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Apr 27 2011 - 06:48:50 ART