When you have say r1 and r2
and you want to only allow ospf in

would applying this on R1 fa0/0 (assuming this is the connecting interface to 
R2) inbound be sufficient?
Extended IP access list 101
    10 permit ospf any any (4826 matches)

it seems it is. Do we not need to allow ospf going out as well? In my lab R1 
has acl 102 outbound defined and there is nothing there about ospf.

Regards,
Alef
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to