Replies: 1 comment
-
forgot to clarify! My devices use Debian-based Linux |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi, everybody!
I'm using FRR 8.3.1 on the opkg package manager. all devices are the same.
The 3 devices are connected as follows:
(R1)eth0 - eth0(R2)e1p1 - e1p1(R3)
on the first device on eth0 address 10.10.10.1/30
on the second device on eth0 address 10.10.10.2/30, on e1p1 address 20.20.20.2/30
on the third device on e1p1 address 20.20.20.1/30
egrp AS 100 routing is up on devices
on the first router I enter the following commands:
ip prefix-list test permit any
ip prefix-list test deny 20.20.20.0/30
ICMP pings come from all three devices. no limit was found for 20.20.20.1. he still gets access to R1
gave commands in conf t:
access-list filter deny 20.20.20.0/30
access-list filter deny 20.20.20.1
ICMP pings come from all three devices. no limit was found for 20.20.20.1. he still gets access to R1
gave commands in conf t:
access-list filter deny any
ICMP pings come from all three devices. no limit was found for 20.20.20.1. he still gets access to R1. although this command completely denies traffic
after which I left the silence and used ip tables
iptables -A INPUT -s 20.20.20.1 -j DROP
and everything worked! ping from 20.20.20.1 fails, that's what I need! but I wanted to do it without using ip tables. I wanted to do it vtish. what is the problem?
I also wrote "permit" rules to the access list and prefix list. it didn't help.
P.S.
I also checked 8.4.3 and 8.5 . doesn't work either. returned to version 8.3.1, because for my tasks it is more stable.
Beta Was this translation helpful? Give feedback.
All reactions