No problem. Using route-maps to tag/filter is almost 100% full proof. As Rob pointed out, there could be some situations where AD could add further complication where a "distance" on the offending protocol may be necessary, but always remember, when changing the AD, it's possible to create more problems than just solving the task you're working on. I use distance as a last option if that's all that's left in the toolkit.
-- max On Sat, Jan 28, 2012 at 1:55 PM, Ray Courtney <[email protected]> wrote: > Thanks Max,**** > > ** ** > > That was the leap I was missing. Linking Communities and Tags - Consider > this copied and pasted to my archive of special configs..**** > > ** ** > > The IPX route-map configs below though, can that be considered almost 100% > foolproof?**** > > ** ** > > ** ** > > ** ** > > *From:* N. Max Pierson [mailto:[email protected]] > *Sent:* 28 January 2012 17:51 > *To:* Ray Courtney > *Cc:* marc abel; [email protected] > > *Subject:* Re: [OSL | CCIE_RS] Routing loops**** > > ** ** > > Hi Ray,**** > > ** ** > > Since tags don't work with BGP, you'll need to use communities. Here's an > example ... (taken from Vol 1 Lab 15).**** > > ** ** > > ip community-list 1 permit 110**** > > ip community-list 1 permit 120**** > > ** ** > > route-map BGP2RIP deny 10**** > > match community 1**** > > !**** > > route-map BGP2RIP permit 20**** > > match ip next-hop 28**** > > set tag 200**** > > !**** > > route-map BGP2RIP permit 30**** > > set metric 9**** > > set tag 20**** > > ** ** > > route-map RIP2BGP deny 10**** > > match tag 20 200 110**** > > !**** > > route-map RIP2BGP permit 20**** > > set community 120**** > > set ip next-hop 150.100.100.2**** > > ** ** > > HTH's**** > > ** ** > > max**** > > ** ** > > ** ** > > On Sat, Jan 28, 2012 at 11:45 AM, Ray Courtney <[email protected]> wrote:** > ** > > Thanks everyone, this is interesting.**** > > **** > > I always use the IPX taught route-maps like so:**** > > **** > > route-map rip2eigrp deny 10**** > > match tag 90**** > > !**** > > route-map rip2eigrp permit 15**** > > match tag 20**** > > set tag 20**** > > !**** > > route-map rip2eigrp permit 20**** > > set tag 120**** > > **** > > **** > > but I got screwed up redistributing BGP and EIGRP as I can’t seem to tag > on BGP route-maps.**** > > **** > > What’s the trick there?**** > > **** > > *From:* N. Max Pierson [mailto:[email protected]] > *Sent:* 28 January 2012 17:21 > *To:* marc abel > *Cc:* Ray Courtney; [email protected] > *Subject:* Re: [OSL | CCIE_RS] Routing loops**** > > **** > > I would have to agree with Marc here. Routing loops can affect so many > different things, I always try and make sure to use route-maps at > ANY redistribution point. If there's one way in and out, i'll usually skip > tagging and filtering, but if there's 2 or more points of entry and exit > with mutual redistribution, I ALWAYS tag and filter. In some cases it > isn't necessary, however if I have the extra 5 or 10 minutes to build in > the filtering logic, extra config can't hurt here for the most part. I'd > rather burn the extra few minutes if I have it than leave a loop that would > possibly cost you even more points due to other task requirements.**** > > **** > > -**** > > max**** > > **** > > **** > > On Sat, Jan 28, 2012 at 10:11 AM, marc abel <[email protected]> wrote:*** > * > > I think that depends on if other things are affected. Most likely you are > going to fail, because it is probably going to break your multicast, oer, > igp, bgp, etc etc. But if it somehow only affected your igp, then maybe you > wouldn't.**** > > > On Sat, Jan 28, 2012 at 8:25 AM, Ray Courtney <[email protected]> wrote: > > > Hi Everyone, > > > > > > > > I've just finished a Vol3 Lab did pretty good, but ended the day with a > > vicious routing loop. > > > > > > > > In the real lab would this mean you automatically fail miserably or > > would you just lose the 3 points for "make sure all loopbacks are > > reachable, using redistribution where necessary"? > > > > > > > > Cheers > > > > > > > > Ray > > > > _______________________________________________ > > For more information regarding industry leading CCIE Lab training, please > > visit www.ipexpert.com > > > > Are you a CCNP or CCIE and looking for a job? Check out > > www.PlatinumPlacement.com > > > > http://onlinestudylist.com/mailman/listinfo/ccie_rs > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > http://onlinestudylist.com/mailman/listinfo/ccie_rs**** > > **** > > ** ** > _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://onlinestudylist.com/mailman/listinfo/ccie_rs
