I have thought of something like this but it doesn't seem to fit with the
L2F process.
GRE tunnels should be easy (relatively - IPSec would make it more fun) but
what is implemented right now uses L2F for dialup users.
So what I'm saying - is yes - I think you're correct for point-to-point
connections and I think I'll have to try that........... :-)
But the big problem I'm trying to solve involves doing the same thing with
L2F.
That doesn't seem to like HSRP. It works when everything is up, but when
HSRP kicks in after a failure the user gets disconnected. When he dials in
again he does get connected on the other router.
But yeah, GRE should work for the point-to-point ethernet.
Kevin Wigle
----- Original Message -----
From: ElephantChild
To: Kevin Wigle
Cc:
Sent: Thursday, May 10, 2001 12:45 PM
Subject: Re: Cisco HSRP Denial of Service Vulnerability [7:3534]
> On Thu, 10 May 2001, Kevin Wigle wrote:
>
> > Unfortunately, HSRP tests the interface and not the path. I would like
an
> > additional keyword like:
> >
> > Standby DestinationIP w.x.y.z
> >
> > If the destination is reachable - cool, if it isn't...... failover.
> >
> > This I think would give us the same capability that HSRP has with serial
> > interfaces.
>
> How about tracking a tunnel interface? Would that work? (The description
> for show interface tunnel in the command reference implies that tunnel
> interfaces are always up, but that the line protocol can be down if the
> tunnel destination is no longer reachable.)
>
> --
> "Someone approached me and asked me to teach a javascript course. I was
> about to decline, saying that my complete ignorance of the subject made
> me unsuitable, then I thought again, that maybe it doesn't, as driving
> people away from it is a desirable outcome." --Me
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4051&t=3534
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
