People may remember I asked about firewalling a subnet of a subnet.
My initial results would seem to indicate that it isn't too big a deal,
since given two routes with equal metrics, one a subset of the other, the
route with the tighter mask wins for its little corner of the network.
So if you have
N1 == 10.1.2.0/255.255.255.0[1]
N2 == 10.1.2.128/255.255.255.128
R == 10.1.2.1
FO == 10.1.2.2
FI == 10.1.2.129
It's quite acceptable for R to route N2 to FO. There shouldn't be any real
need to play around with trying to route the remainder of N1.
Paul
[1] Yes, 10.1.2. is only used as a generic example...
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
