deny routes?

[smehrnia]

Hi all,

might be a little silly but i cant get it right now!

can we simply deny a certain route (lets say 156.10.0.0) learned from a certain interface (ex: serial s0/0) in a routing process (lets say RIP) without using route-maps?

regards,

Soroush.     

[John Blakley]

You can deny routes with access-lists an distribute-lists in most cases...

[smehrnia]

thx but i already know that, my question was: this route 156.10.0.0 which it comes in from int S0/0 i believe distribute lists deny the prefix regardless of where its comming from.

[John Blakley]

Your acl applied to the distribute list is what controls what comes in. You can make an extended acl list:

access-list 101 deny ip host 192.168.1.2 1.1.1.0 0.0.0.255

access-list 101 permit ip any any

router eigrp 100

distribute-list 101 in

The above will deny route 1.1.1.0/24 coming from host 192.168.1.2. This will be the neighbor address that you're getting the route from and the specific route that you want to deny. I used eigrp as an example, but it works just as well with eigrp. With ospf on the other hand, I believe that you have to match on the router id and not the neighbor address.

Otherwise, the only other way to match an interface is obviously a route map.

[Hitesh Vinzoda · Accepted solution]

Hi you can use below command to filter inbound updates received on a given interface...

router eigrp 1

distribute-list 1 in FastEthernet0/1

router rip

distribute-list 1 in FastEthernet0/1

Hope this helps.

Hitesh

Note : Pls rate useful posts.

[smehrnia]

Thank you for the relief lol this was a moment when my brain hung up on everything LOL pffffff