How to block traffic originating from a router?

Neuromancer · ‎03-18-2007

I know that ACLs cannot do this. I think I remember reading somewhere in my BSCI studies of a technique to do this. Is the only way to do this to use passive interfaces or distribute lists for redistribution?

Thanks!

royalblues · ‎03-18-2007

Chris,

Distribute lists are used to block routing updates sent over a specific interface. You can use these lists to advertise certain prefixes to the neighbor. The adjaceny between the neighbors is still maintained.

Passive interfaces on the other work a bit differently. When used in EIGRP & OSPF, they do not send hello packets nor listen to them and hence adjacencies cannot be formed.

RIP on the other hand continues to listen to updates on the passive interface.

HTH, rate if it does

Narayan

paolo bevilacqua · ‎03-18-2007

Can you better specify what kind of traffic are you talking about ? Routing updates, traffic that is sourced from withing the router, voice or what ?