11-23-2023 12:11 AM
i used to have a route map on all my interface vlans that leads internet traffic to a proxy. Afterward the proxy was disabled and the route map ACL was modified to deny the vlans subnet from going to the proxy ip and go normally to the firewall and allow everything else to the old unused proxy ip. My question is there any use to keep the old configuration? like to lead any other non-vlan ip that is coming to the vlan interface on the core switch to a dead end?
Solved! Go to Solution.
11-23-2023 12:18 AM
Hello @baselzind
While it might act as a form of "blackhole" for traffic that matches certain criteria, it introduces unnecessary complexity and could potentially cause confusion in the future (?)
If not necessary now, I prefer clean that configuration, and if I need blackholing I will do that with proper prefix-list or route-map with specific description/remark.
11-23-2023 12:18 AM
Hello @baselzind
While it might act as a form of "blackhole" for traffic that matches certain criteria, it introduces unnecessary complexity and could potentially cause confusion in the future (?)
If not necessary now, I prefer clean that configuration, and if I need blackholing I will do that with proper prefix-list or route-map with specific description/remark.
11-23-2023
04:33 AM
- last edited on
11-24-2023
12:52 AM
by
Translator
Hello
For you site router - which usually has a default route towards the wan you could use a null route as well so the rtr will not forward traffic back towards the isp for any non active vlan within you lan subnet ip range
Example -
site lan subnet ip range - 192.168.0.0/20 ip route 0.0.0.0 0.0.0.0 x/x 10.1.1.1. name default -route-towards-wan
Ip route 192.168.0.0 255.255.240.0 null0
11-29-2023 02:11 AM
please can you explain further ? what does the 10.1.1.1 supposed to represent and what does the second route function?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide