EIGRP manipulations

[Bekzod Fakhriddinov]

HI guys . I have routerA with several subnets/vlans connected-via-EIGRP-to Distribution routerB -firewall-internet.  Distribution router B has whole bunch of routers connected to it (kind of hub and spoke network).

On router A I have vlanX which I wanted to allow go to internet and back from Internet BUT I need to hide the rest of my networks from vlanX, so vlanX will see only path to Internet . The way I know is to include vlanX subnet to EIGRP and then create ACL on routerA to allow/block access . But I guess there might be more elegant way like route filtering or..

Can you share ur opinions please ?

Thank you

[Richard Burts]

If I am understanding your requirements correctly then it seems that configuring a VRF and putting vlan X into that VRF would provide separation for that vlan from the rest of your subnets.

HTH

Rick

[Bekzod Fakhriddinov]

but VlanX must have access to Internet which is advertised with EIGRP by Distribution RouterB together with  other subnets information . So Vlan x need to know how to go to Internet trough RouterB but shouldn't know other subnets advertised by RouterB . 

The problem is RouterA has other vlans allowed to access those subnets . As more I think as more I figure out that ACLs is only way to do it .