limit the access by routing protocls

ladan.eftetahi · ‎02-25-2007

Hi

we have too many branches that connected to headquarter with ospf protocols , we have department that is connected to HQ by EIGRP , so we want each of the branches have access to HQ & these department .so , in the routing table of each branch we have EIGRP & ospf routing protocols .But we don't want that branches have access to each other at all. as regards , we have IPsec between each branch to HQ , & we introduce interesting traffic,could u pls tell me , what can I do (solution) to limit these access ?,

route filtering , could be a suitable solution?

thanx

cpembleton · ‎03-11-2007

You can use route-maps to control which routes the routing protocols are sending.

Here is an ospf example: EIGRP would be similar.

access-list 10 permit 192.168.10.0 0.0.0.255

route-map ospf-filter deny 10

match address 10

route-map ospf-filter permit 20

router ospf 1

router-id 10.0.0.2

log-adjacency-changes

network 172.16.2.1 0.0.0.255 area 0

network 192.168.10.0 0.0.0.255 area 1

distribute-list route-map ospf-filter out

Hope this helps.

Chad

Please rate if it does.