Monday, April 11, 2011

notes: EIGRP Updates

- Updates are multicast to 224.0.0.10.
- Updates are non-periodic, partial and bounded(only to relevant neighbors)
- Can be sent as unicast at a process level with the "neighbor" command.
- But both sides must be configured to use unicast.
- BEWARE: If configured, EIGRP stops processing all multicast packets that come inbound on that interface. Also stops sending multicast packets on that interface.
- BEWARE: Upon configuring all sessions from that interface will be dropped.
- Using an ACL to filter EIGRP traffic between two neighbors are recommended.
- Packets sourced by a router are not passed through an outbound ACL by default.

-----------
COMMANDS
-----------
Defines a unicast session to a neighbor. Required on both sides

router eigrp {asn}
neighbor {ip} {interface}


ACL Applied inbound, as outbound would have no effect
- Denies any EIGRP traffic
- Permit all other traffic

ip access-list 100 deny eigrp any any
ip access-list 100 permit ip any any
!
int eth0
ip access-group 100 in


note: " show ip eigrp neighbor" - neighbor will not show.

show run
show ip protocols

CCIE SCENARIO: you should receive only and shouldnt sent out updates on the interface. passive interface is not an option.

ip access-list 100 deny eigrp any any
ip access-list 100 permit ip any any

distribute-list 100 outh eth0


No comments:

Post a Comment