[c-nsp] Crypto and CEF

[Rodney Dunn]

On Tue, Jun 12, 2007 at 04:40:47PM +0800, Adrian Chadd wrote:
> On Tue, Jun 12, 2007, Rikard Stemland Skjelsvik wrote:
> 
> > Actually we route to the LAN in the other end out the WAN interface
> > ip route x.x.x.x 255.255.255.192 FastEthernet0
> 
> Why do you do this rather than routing to an IP address on the other
> end of the WAN interface?

There are a couple of scenarios where recursive satics can be used.
ie: track a path that is dynamically learned

For pointing at the interface ip unnumbered usage is the most common.

But you are right on the money. Unless you have a realy point to
point media (serial, pvc, tunnel, etc.) you should never leave the
next hop out of the static route. If you want to tie it to the interface
put the interface *AND* next hop in there.

Rodney

> 
> (Why do people do this? Is it in an example somewhere that I've
> never seen?)
> 
> 
> 
> Adrian
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/