topic Re: ACL to permit Routing Protocols in Network Security https://community.cisco.com/t5/network-security/acl-to-permit-routing-protocols/m-p/1027466#M940345 <HTML><HEAD></HEAD><BODY><P>You are thinkging about this way to much. Its alot more simple.</P><P>eigrp</P><P>access-list permit eigrp host R2 host R1</P><P>Thats it. The same idea goes for OSPF</P><P>access-list permit ospf host R2 host R1</P><P>try it out.</P><P>Dont worry about the multicast addresses</P><P>Jake</P></BODY></HTML> Wed, 26 Mar 2008 16:35:47 GMT cjake7777 2008-03-26T16:35:47Z ACL to permit Routing Protocols https://community.cisco.com/t5/network-security/acl-to-permit-routing-protocols/m-p/1027465#M940339 <P>Hi,</P><P></P><P>1)</P><P>For Router ACL, to permit routing information updates between R1 and R2, if R1 has an inbound ACL, for EIGRP, is the following enough?</P><P>(R1)</P><P>permit eigrp host R2 host 224.0.0.10</P><P></P><P>or do we need another line</P><P>(R1)</P><P>permit eigrp host R2 host 224.0.0.10</P><P>permit eigrp host R2 host R1</P><P></P><P>This is because when I tried this out, I would definately need another ACL line which permits eigrp from host R2 to host R1, if not, the EIGRP keeps flapping after a while.</P><P></P><P>Also, if for the case of ASA/PIX, do we do the same as the above or just permit to host 224.0.0.10 is sufficient?</P><P></P><P>2)</P><P>For OSPF, do we need to have 3 permit statements then?</P><P>permit ospf host A host 224.0.0.5</P><P>permit ospf host A host 224.0.0.6</P><P>permit ospf host A host B</P><P></P><P>or it'll depend on the OSPF configurations.. example, for NBMA networks.</P><P>permit ospf host A host 224.0.0.5</P><P>permit ospf host A host 224.0.0.6</P><P>permit ospf host A host B</P><P></P><P>and for point-to-point links</P><P>permit ospf host A host B</P><P></P><P></P><P>Do correct my ACL if I'm wrong <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>Thanks!</P> Mon, 11 Mar 2019 12:22:19 GMT https://community.cisco.com/t5/network-security/acl-to-permit-routing-protocols/m-p/1027465#M940339 steven.pw.lau 2019-03-11T12:22:19Z Re: ACL to permit Routing Protocols https://community.cisco.com/t5/network-security/acl-to-permit-routing-protocols/m-p/1027466#M940345 <HTML><HEAD></HEAD><BODY><P>You are thinkging about this way to much. Its alot more simple.</P><P>eigrp</P><P>access-list permit eigrp host R2 host R1</P><P>Thats it. The same idea goes for OSPF</P><P>access-list permit ospf host R2 host R1</P><P>try it out.</P><P>Dont worry about the multicast addresses</P><P>Jake</P></BODY></HTML> Wed, 26 Mar 2008 16:35:47 GMT https://community.cisco.com/t5/network-security/acl-to-permit-routing-protocols/m-p/1027466#M940345 cjake7777 2008-03-26T16:35:47Z