Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Distribute list on DMVPN spoke

Hi,

I would need to apply a distribute list on a DMVPN spoke and not sure if that DL needs to be applied at the tunnel interface or the physical interface where the tunnel is sourced. Please let me know if you have any thoughts.

This is how the configuration looks at other branches that do not have DMVPN configured:

access-list 1 deny   0.0.0.0

access-list 1 permit any

access-list 2 permit 0.0.0.0

access-list 2 deny   any

router eigrp 1

distribute-list 2 in FastEthernet0/0

distribute-list 1 out FastEthernet0/0

Thanks,

Everyone's tags (5)
1 REPLY
VIP Purple

Re: Distribute list on DMVPN spoke

If you want to control your routing between the spoke and the hub, you have to apply it for the tunnel-interface. Or more general: With the interface that is enabled for the routing-protocol.

And you should look at the prefix-lists instead of distribute-lists. They are much more flexible once you get used to them.

http://www.cisco.com/en/US/partner/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#fourteen

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

387
Views
0
Helpful
1
Replies
CreatePlease to create content