Johan,

All in all I would recommend you to make your own diagram including things
like NAT and filtering (CBAC, ZFW, ASAs inside-outside). This is
particularly useful later in the lab.

Regards,
-- 
Piotr Kaluzny
CCIE #25665 (Security), CCSP, CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com


On Tue, Feb 16, 2010 at 3:58 PM, Shawn Mesiatowsky
<sha...@digitalcortex.ca>wrote:

> On an asa it is simple,
>   show route inside
>
> this include all routing protocols, statics, and directly connected
> interfaces
>
> on a router, is is more difficult
>  show ip route | in FastEthernet0/0
>
> this will show you directly connected routes, and routes learned by most
> routing protocols. It will not show you routes from BGP or static
> routes, so you could be missing some important details. You could always
> look at the routing table, and statics, and any bgp configuration:
>
> show run | in ip route   (show any statics)
> show run | sec router bgp  (look at the bgp config)
> show ip route | in FastEthernet0/0 (look for any routes learnt on the
> inside interface)
>
> best bet is to look over the diagram. If you are unsure if you got all
> networks, look at the data that was listed above.
>
> Johan Bornman wrote:
> >
> > Hi,
> >
> > When the question asks that tcp port X & Y must be allowed to all
> > internal networks, what is the quickest way to find those networks
> > without having to look at the address table/diagram and possibly miss
> > a network.
> >
> > Thanks
> >
> > Johan
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
> >
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to