|
Posted by Leigh on January 23, 2006, 3:27 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Hey there,
The passive interface should do the job.
Try something along the lines of:-
access-list 101 deny eigrp any any
access-list 101 permit ip any any
Put that outbound on the interface as well as the passive interface and
do a sh access-list to see if there are any hits on the access-list.
Passive interface should do the trick though...
LH
CCIE#15331
BG wrote:
> I have several DSL access routers (7206VXR's) that customers dsl
> connections terminate on. These routers all have connections back to
> our core router (also 7206VXR).
> I'm running EIGRP between the DSL routers and the core router.
> (thus when a customer comes online with an ip, EIGRP on the dsl router
> talks to our core, and core knows where to route for that ip)
>
> My issue is, I do not want any EIGRP info flowing out to our DSL
> customers. I have tried using the passive-interface on the DSL
> routers, but customers are telling me they are still seeing EIGRP info
> on their end.
>
> Do I need to be using an access list on the customer interface side of
> the DSL access routers? or should the passive-interface be doing the
> job.
>
> EIGRP config from 1 of the dsl routers:
>
> router eigrp 10
> redistribute static
> passive-interface FastEthernet1/0 (this int goes to dsl customers)
> network a.b.c.d
> network a.b.c.e
> no auto-summary
> neighbour x.x.x.x FastEthernet0/0 (this int goes to core router)
>
|