Do not use the neighbor next-hop-self command to modify the next hop attribute for a route reflector when this feature is enabled for a route reflector client. Using the neighbor next-hop-self command on the route reflector will modify next hop attributes only for routes that are learned from eBGP peers and not the intended routes that are being reflected from the route reflector clients. To modify the next hop attribute when reflecting a route, use an outbound route map.

ip access-list ext TEST
 permit ip host 1.1.1.1 host 2.2.2.2
exit

int f0/0
 ip addr 1.1.1.1 255.255.255.0
 ip access-group TEST out

This will allow traffic

FROM 1.1.1.1 going OUT TO 2.2.2.2.

If we change the direction from out to in as the example below,

ip access-list ext TEST
 permit ip host 2.2.2.2 host 1.1.1.1
exit

int f0/0
 ip addr 1.1.1.1 255.255.255.0
 ip access-group TEST in

this will allow traffic

Coming IN FROM 2.2.2.2 TO 1.1.1.1

in SVI or vlan interface, this has a slight different understanding.

ip access-list ext TEST
 permit ip host 1.1.1.1 host 2.2.2.2
exit

int vlan100
 ip addr 1.1.1.1 255.255.255.0
 ip access-group TEST in

The above example will allow traffic

Coming IN FROM 1.1.1.1 TO 2.2.2.2

While the example below

ip access-list ext TEST
 permit ip host 1.1.1.1 host 2.2.2.2
exit

int vlan100
 ip addr 2.2.2.2 255.255.255.0
 ip access-group TEST out

will allow traffic

FROM 1.1.1.1 going OUT TO 2.2.2.2

I managed to get my dream job to join as a professional service taking projects and learn a lot of new stuff. The pressure is there and the knowledge is priceless. There were highs and downs with this job and I learned my lesson.

We finally got our own place after a year of hunting and we’ve been living in it for about 3 weeks. Still need to fix a lot of things but it feels different when you have your own place and doing the work. Every day I thank God for this place.

My wife went for a minor surgery and will undergo for another one on January 2009. Seeing all these things were OK and really confident that the next surgery will also be another success. If all well, we are also praying for a baby this year or next year.

Year 2009 I’m planning to have my CCIE written test and Godspeed, I’ll have my Lab too. I’m not sure how I can work these out but I have my plan set. All I need is being determined and focus.

Welcome 2009!

Careful planning puts you ahead in the long run; hurry and scurry puts you further behind.
Proverbs 21:4-6