As Kingsley stated focus more on the results than how you do it. All CCIE tracks focus on results more than configuration.
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Mark Senteza Sent: Thursday, November 11, 2010 1:27 AM To: [email protected] Subject: [OSL | CCIE_Security] Yusuf Lab 1: Control Plane Protection Yusuf's Lab 1, Control Plane Protection question asks to filter ICMP from non-1918 address space to the router. In his solution, the policy-map is tied to the control-plane. Also he uses two ACLs - one permitting ICMP from any and the other permitting ICMP from 1918 addresses. In my solution, I placed the policy-map under the host subinterface on the control-plane. I also only used one ACL - denying ICMP from 1918 addresses and permitting ICMP any any. My test results were the same. Question - does it make a difference that I did it this way i.e used "control-plane host" and not "control-plane" to tie the policy-map and yet still got the same results. That is: control-plane host service-policy input COPP Which is the recommended way to do it ? I assume Yusuf's way, since he wrote the book !! Thanks again. Mark
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
