2010/5/6 Tolulope Ogunsina <[email protected]>
> Hi,
> You use distribute lists to filter routes per interface.
>
> -
You are right. But shouldnt the summary-address command on the ASA-interface
have the same effect? Or do I misunderstand that command?
After removing it the R9 gets a default route as well as the 6.6.2-route
from EIGRP. My config is now identical to the one in the DSG. But what
about the "The DMZ interface should only receive a default route"-bullet in
task 1.4? Thats not fulfulled since R9 gets the 6.6.2-route, imho. Or am I
wrong?
R9#sh ip route eigrp
6.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
D EX 6.6.2.0/24 [170/2560002816] via 10.17.17.10, 00:04:12,
FastEthernet0/1
D 6.6.99.8/32 [90/156416] via 10.17.17.10, 00:04:12, FastEthernet0/1
10.0.0.0/24 is subnetted, 2 subnets
D 10.1.1.0 [90/28416] via 10.17.17.10, 00:04:12, FastEthernet0/1
D*EX 0.0.0.0/0 [170/2560002816] via 10.17.17.10, 00:04:12, FastEthernet0/1
R9#
By using an distribute-list I get the desired result:
ASA:
access-list E2DMZ standard permit host 0.0.0.0
router eigrp 89
distribute-list E2DMZ out interface DMZ
R9#sh ip route eigrp
D*EX 0.0.0.0/0 [170/2560002816] via 10.17.17.10, 00:00:03, FastEthernet0/1
R9#
Br Jimmy
-
-------
Jimmy Larsson
Ryavagen 173
s-26030 Vallakra
Sweden
http://blogg.kvistofta.nu
-------
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
