Link to home
Start Free TrialLog in
Avatar of dissolved
dissolved

asked on

Advertising OSPF and security

was looking through a network I inherited and saw the below:
Is the deny-ospf-out acl doing anything? I don't see it being applied to any interface or referenced anywhere else.

Is it safe to assume that we are advertising OSPF out to everyone?
access-list deny-ospf-out standard permit 172.16.0.0 255.255.0.0
access-list deny-ospf-out standard permit 10.80.8.0 255.255.255.0
access-list deny-ospf-out standard permit 192.168.100.0 255.255.255.0
access-list permit-ospf-out standard permit any
access-list private-inbound extended deny ip any 10.10.10.0 255.255.255.0
access-list private-inbound extended permit ip 172.16.0.0 255.255.0.0 any
 
 
 
 
access-group private-inbound in interface inside
access-group outside-to-inside in interface outside

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of Don Johnston
Don Johnston
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dissolved
dissolved

ASKER

thanks. Does this mean we are advertising OSPF out to the internet :0
Depending on your configuration, it's possible. There's certainly nothing about the ACL that would explicitly deny it.