Monday, April 11, 2011

notes: no validate update source and EIGRP Filtering

for Secondary IPs. - neighbor will not form to the secondary IPs.

router eigrp 100
no validate update source



Filtering:

1. offset-list - the offset-list feature in EIGRP is used to modify the metric on a perroute
basis or a per-interface basis.
- Increases the metric.

#offset-list [ACL] {in|out} {offset} {interface}

router eigrp 100
offset-list 1 in 2147483647 FastEthernet0/3
!
access-list 1 permit 150.1.3.0


2. distribute-list

- Filters all routes matching the ACL or prefix-list

distribute-list {ACL | prefix} {in|out}

std acl:

router eigrp 10
distribute-list 1 in Serial0/0
!
access-list 1 permit 0.0.0.0 255.255.254.255


extended acl:

access-list 100 deny ip host 155.1.0.1 host 150.1.2.0
access-list 100 deny ip host 155.1.0.2 host 150.1.2.0
access-list 100 deny ip host 155.1.0.4 host 150.1.2.0
access-list 100 permit ip any any
!
router eigrp 100
distribute-list 100 in Serial0/0



- Filters all routes to/from a neighbor

distribute-list gateway {prefix-list} {in|out} {interface}


router eigrp 100
distribute-list prefix STOP_RIP_SUBNETS out Serial0/1
!
ip prefix-list STOP_RIP_SUBNETS seq 5 deny 30.0.0.0/14 ge 16 le 16
ip prefix-list STOP_RIP_SUBNETS seq 10 deny 31.0.0.0/14 ge 16 le 16
ip prefix-list STOP_RIP_SUBNETS seq 15 permit 0.0.0.0/0 le 32


- Filters prefix from a specific source from entering the routing table

distribute-list prefix {prefix-routes} gateway {prefix-source} {in|out}


router eigrp 100
distribute-list prefix PERMIT_ALL gateway NOT_FROM_R4 in
!
ip prefix-list NOT_FROM_R4 seq 5 deny 155.1.146.4/32
ip prefix-list NOT_FROM_R4 seq 10 permit 0.0.0.0/0 le 32
!
ip prefix-list PERMIT_ALL seq 5 permit 0.0.0.0/0 le 32


- Changes the distance for both internal and external EIGRP routes

distance eigrp {ad-internal} {ad-external}

- Using Route-maps

router eigrp 100
distribute-list route-map FILTER_ON_TAGS in
!
route-map FILTER_ON_TAGS deny 10
match tag 4
!
route-map FILTER_ON_TAGS permit 20



3. Using Admin distance:

distance {AD} {address} {wildcard} {acl#|aclname}

- any source

access-list 4 permit 150.1.4.0
!
router eigrp 100
distance 255 0.0.0.0 255.255.255.255 4

- specific per neighbor

access-list 7 permit 150.1.7.0
!
router eigrp 100
distance 255 155.1.37.7 0.0.0.0 7

4. Using redistribution with route-maps

router eigrp 100
redistribute rip metric 100000 100 255 1 1500 route-map RIP_TO_EIGRP
!
ip prefix-list VLAN_43 seq 5 permit 204.12.1.0/24
!
route-map RIP_TO_EIGRP permit 10
match ip address prefix-list VLAN_43
set tag 4
!
route-map RIP_TO_EIGRP permit 20

No comments:

Post a Comment