! Listing 9.3: Outside router R-A supporting firewall access to the inside ! !Copyright (C) 2001 by Vincent C Jones. All Rights Reserved. version 11.0 ! hostname R-A ! ! WARNING!! Self defense configuration statements not shown ! ip subnet-zero ! interface Loopback0 description Target address for IBGP neighboring ip address 192.168.0.1 255.255.255.255 ! interface Serial0/0 description T1 to ISP #1 ip address 110.0.0.1 255.255.255.252 ! interface Ethernet1/0 description LAN-A link to firewall F-1A ip address 100.0.0.2 255.255.255.0 no ip redirects standby 6 priority 200 standby 6 preempt standby 6 ip 100.0.0.1 ! interface Ethernet1/1 description LAN-B link to firewall F-2B ip address 101.0.0.3 255.255.255.0 no ip redirects standby 7 priority 100 standby 7 ip 101.0.0.1 ! router ospf 60000 passive-interface Serial0/0 network 100.0.0.0 0.0.0.255 area 1.2.3.4 network 101.0.0.0 0.0.0.255 area 1.2.3.4 network 110.0.0.0 0.0.0.3 area 1.2.3.4 network 192.168.0.1 0.0.0.0 area 1.2.3.4 ! router bgp 60000 network 100.0.0.0 mask 255.255.255.0 network 101.0.0.0 mask 255.255.255.0 neighbor 110.0.0.2 remote-as 54321 neighbor 110.0.0.2 filter-list 10 out neighbor 192.168.0.2 remote-as 60000 neighbor 192.168.0.2 update-source Loopback0 ! ip classless ! ip as-path access-list 10 permit ^(_60000)*$ ! end