Good to know. Thanks again all. On Thu, Nov 11, 2010 at 9:25 AM, Tyson Scott <[email protected]> wrote:
> As Kingsley stated focus more on the results than how you do it. All CCIE > tracks focus on results more than configuration. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Managing Partner / Sr. Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco > CCIE (R&S, Voice, Security & Service Provider) certification(s) with > training locations throughout the United States, Europe, South Asia and > Australia. Be sure to visit our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Mark Senteza > *Sent:* Thursday, November 11, 2010 1:27 AM > *To:* [email protected] > *Subject:* [OSL | CCIE_Security] Yusuf Lab 1: Control Plane Protection > > > > Yusuf's Lab 1, Control Plane Protection question asks to filter ICMP from > non-1918 address space to the router. > > In his solution, the policy-map is tied to the control-plane. Also he uses > two ACLs - one permitting ICMP from any and the other permitting ICMP from > 1918 addresses. > > In my solution, I placed the policy-map under the host subinterface on the > control-plane. I also only used one ACL - denying ICMP from 1918 addresses > and permitting ICMP any any. > My test results were the same. > > Question - does it make a difference that I did it this way i.e used > "control-plane host" and not "control-plane" to tie the policy-map and yet > still got the same results. That is: > > control-plane host > service-policy input COPP > > Which is the recommended way to do it ? I assume Yusuf's way, since he > wrote the book !! > > Thanks again. > > Mark >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
