Deny OSPF neighbor relationship using access list
Hi, It seems the source address possibly wrong…
1. Debug ip ospf adj 2. Make sure where hello packet is sourced, and destined 3. Apply access-list on interface.
—– ec.c!cc;c id?!f%f: 2008e946f24f% 23:23 e.e: Cisco certification ; Cisco certification d;6e : Deny OSPF neighbor relationship using access list
Hello Expert, I am trying to deny OSPF from forming relationship between ASAs. I tried the following without success. 1.1.1.1 is the neighbor IP address. 1.1.1.2is the local interface IP.
access-list DMZ-IN extended deny ospf host 1.1.1.1 host 1.1.1.2 access-list DMZ-IN extended deny ospf host 1.1.1.1 host 224.0.0.5 access-list DMZ-IN extended deny ospf host 1.1.1.1 host 224.0.0.4 access-list DMZ-IN extended deny ip host 1.1.1.1 host 224.0.0.5 access-list DMZ-IN extended deny ip host 1.1.1.1 host 224.0.0.4
Any idea?
Thanks.
























