[nsp] Securing OSPF

Matt Stockdale mstockda at logicworks.net
Wed Jun 23 09:03:09 EDT 2004

Yes, I'm going to be spending a lot of time on CCO today, I think. I did
look briefly through the OSPF faq there, and didn't see much about the
external routes, but I will keep digging.

Thanks to everyone who has responded so far..


> -----Original Message-----
> From: sthaug at nethelp.no [mailto:sthaug at nethelp.no] 
> Sent: Wednesday, June 23, 2004 3:52 AM
> To: Matt Stockdale
> Cc: cisco-nsp at puck.nether.net
> Subject: RE: [nsp] Securing OSPF
> > Perhaps that's it. Most of those type 2 externals are redistribute 
> > connected/statics from our T1 aggregation 7200's. The problem I'm 
> > seeing (maybe it's supposed to be this way) is that the metric on 
> > every one of those externals is 20, whether that subnet is directly 
> > connected to the 7200 that's redistributing it (via fast-e), or 
> > another 7200 that's one fast e and one DS3 hop away.
> You're looking at the difference between OSPF external type 1 
> and external type 2. Reading up on the difference between 
> those types would be useful.
> Steinar Haug, Nethelp consulting, sthaug at nethelp.no

More information about the cisco-nsp mailing list