Hello,

you can permit VRRP, OSPF, ICMP and BGP-Traffic (in this order) in an
incoming-acl like this:

 ip access-list extended ACLNAME
  permit 112 any any
  permit 89 any any
  permit icmp any any
  permit tcp any any eq 179
  ....
  exit

Regards,
Christian

On Tue, 4 Feb 2014, Walter Witkowski wrote:

> Hello All from snowy Pennsylvania,
>  
> I have a question on acl's.  I haven't taken a trace to confirm but 
> indications are that the two VRRP instances on the cores do not see each
> other.  Both VRRP interfaces are reporting they are MASTER.   I have similar 
> acls created on each core interface.  In creating an IN acl do
> the VRRP packets have to be specifically allowed?  If so what would the acl 
> look like?
>  
> thnks in advance
>  
>  
>  
>  
> Walt Witkowski Primary Network Specialist - Office of Information Technology 
> - Delaware County Community College
> 610-359-5017(phone) / 610-359-4123 (fax) / 856-217-4430(cell)
> [email protected]
>
>  *  --To unsubscribe from enterasys, send email to [email protected] with the 
> body: unsubscribe enterasys [email protected]
>
>

mit freundlichen Grüßen

Christian Frömmel
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12200 Berlin
  [email protected] | http://www.charite.de
---
To unsubscribe from enterasys, send email to [email protected] with the body: 
unsubscribe enterasys [email protected]

Reply via email to