On Tue, Aug 18, 2009 at 9:06 AM, Nhan Duong<[email protected]> wrote:
>
>
>
>
> Please help to verify these scenarios
>
>
>
>  =======Scenario 1==============
>
> -----------R1---------------------
>
>
>
> int f0/0
>
>  ip address 10.10.10.1 255.255.255.0
>
> int f0/1
>
>  ip address 10.10.20.1 255.255.255.0
>
>
>
> router ospf 1
>
> no auto
>
> network 10.10.10.0 0.0.0.255
>
> -----------------------------------
>
> "network" is controlling which interface to join ospf.  Which mean int f0/1
> wills not send or receive any ospf?

Yes, exact, int fa0/1 will not participate to OSPF at all, it's
network will not be advertised.

>
>
> =======Scenario 2 ===============
>
>
>
> -----------R1---------------------
>
>
>
> int f0/0
>
>  ip address 10.10.10.1 255.255.255.0
>
> int f0/1
>
>  ip address 10.10.20.1 255.255.255.0
>
>
>
> router ospf 1
>
> no auto
>
> network 10.10.0.0 0.0.255.255
>
> passive int f0/1
>
>
>
> -----------------------------------
>
> "network" will allow 10.10/16 to join ospf, however "passive int f0/1" wills
> stop the int f0/1 to send ospf.

It will advertise it's network to the other OSPF peers, but it will
neither send nor receive any update, nor sending hello packets.

>
>
>
> ======== Scenario 3 ============
>
>
>
> -----------R1---------------------
>
>
>
> int f0/0
>
>  ip address 10.10.10.1 255.255.255.0
>
> int f0/1
>
>  ip address 10.10.20.1 255.255.255.0
>
>  access-group 1 out
>
>
>
> access-list 1 deny ip 224.0.0.5 any
>
> access-list 1 deny ip 224.0.0.6 any
>
> access-list 1 deny ip any 224.0.0.5
>
> access-list 1 deny ip any 224.0.0.6
>
> access-list 1 permit ip any
>
>
>
> router ospf 1
>
> no auto
>
> network 10.10.0.0 0.0.255.255
>
>
>
> -----------------------------------
>
> "network" will allow 10.10/16 to join ospf, however "access-list 1" wills
> stop the int f0/1 to send or receive ospf.
>

I think it will prevent it to send but it will able to receive
advertisement and hellos from peers.
Your acl is applied in the out direction.

>
>
> ======== Scenario 4 =============
>
>
>
> -----------R1---------------------
>
>
>
> int f0/0
>
>  ip address 10.10.10.1 255.255.255.0
>
> int f0/1
>
>  ip address 10.10.20.1 255.255.255.0
>
>  access-group 1 out
>
>
>
> access-list 1 deny ospf any any
>
> access-list 1 permit ip any
>
>
>
> router ospf 1
>
> no auto
>
> network 10.10.10.0 0.0.255.255
>
>
>
> -----------------------------------
>
> "network" will allow 10.10/16 to join ospf, however "access-list 1" deny
> ospf protocol.
same thing here as the previous task
>
>
>
> ________________________________
> Hotmail® is up to 70% faster. Now good news travels really fast. Try it now.
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to