Uh... reboot. It shouldn't have been dropping those protocols. I haven't seen that happen before. Port-Filter is only supposed to affect TCP and UDP traffic, which is confirmed by the following statement in the configuration guide.
The control-plane Port-filtering feature enhances control plane protection by providing for early dropping of packets directed toward closed or nonlistened IOS TCP/UDP ports on the router. The port-filter feature policy can be applied only to the control-plane host subinterface. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: Vybhav Ramachandran [mailto:[email protected]] Sent: Monday, December 13, 2010 9:39 AM To: Tyson Scott Cc: Jerome Dolphin; OSL Security Subject: Re: [OSL | CCIE_Security] lab 18 task 8.2 ttl expiry Hello Tyson, I did try that. That works with RIP and BGP. But how about OSPF , EIGRP which do not use any TCP or UDP ports? Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
