OSPF + ACLs

Apr 14, 2006 1 Replies
F

Hi all,


I've a basic question about OSPF and ACLs but i'm hesitating. I've two routers with 2 Fast Ethernet, OSPF are running on all network interfaces (point to point). I've an ACL on one interface like that :



permit ip 192.168.1.224 0.0.0.31 192.168.0.0 0.0.0.127 permit ip 192.168.1.224 0.0.0.31 192.168.0.128 0.0.0.127 permit ip 192.168.1.224 0.0.0.31 192.168.3.64 0.0.0.63 permit tcp 192.168.1.224 0.0.0.31 any eq www deny ip any any



I wonder whether this interface continue to send Hello Packets since the multicast address 224.0.0.5 is not permit. May I have to insert a nex line in my ACL to allow the multicast address or not ?


Thanks Regards



Franck


Vote
Twitter Facebook LinkedIn
M

Router originated traffic is not filter by access lists (ie. outbound OSPF hellos)

To avoid blocking inbound OSPF packets, you can permit OSPF traffic by configuring "permit ospf any any"

Check that there are matches by using the show access-list command

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required