Shun Interface

Answered Question
Aug 28th, 2008
User Badges:

When shunning, how is the interface decided?


show shun

shun (outside) 1.1.1.1 0.0.0.0 0 0 0

shun (inside) 2.2.2.2 0.0.0.0 0 0 0


I believe both IP addresses should be shunned on the outside interface.

Correct Answer by Syed Iftekhar Ahmed about 8 years 11 months ago

As per my understanding


The decision order is as follows


1. Static NAT entry

All static entries are checked to see if there is an entry with the global IP as the shunned IP. If there is then the actual shunned IP would be the local IP and the interface would be the local interface.


2. check the global addresses in the xlate and same process as above


3. If there is still no match, then a route lookup to figure out the source interface for this address and apply the shun to the interface returned by the route lookup.


Syed Iftekhar Ahmed

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Syed Iftekhar Ahmed Thu, 08/28/2008 - 13:51
User Badges:
  • Blue, 1500 points or more

As per my understanding


The decision order is as follows


1. Static NAT entry

All static entries are checked to see if there is an entry with the global IP as the shunned IP. If there is then the actual shunned IP would be the local IP and the interface would be the local interface.


2. check the global addresses in the xlate and same process as above


3. If there is still no match, then a route lookup to figure out the source interface for this address and apply the shun to the interface returned by the route lookup.


Syed Iftekhar Ahmed

rmeans Fri, 08/29/2008 - 04:32
User Badges:

Thanks. I found a static entry that should have been a class C but instead referenced a class B.

Actions

This Discussion