! Listing 9.4: Outside router R-B supporting firewall access to the inside
!
!Copyright (C) 2001 by Vincent C Jones. All Rights Reserved.


version 11.0
!
hostname R-B
!
!  WARNING!! Self defense configuration statements not shown
!
ip subnet-zero
!
interface Loopback0
 description Target address for IBGP neighboring
 ip address 192.168.0.2 255.255.255.255
!
interface Serial0/0
 description T1 to ISP #2
 ip address 120.0.0.1 255.255.255.252
!
interface Ethernet1/0
 description LAN-A link to firewall F-1A
 ip address 100.0.0.3 255.255.255.0
 no ip redirects
 standby 6 priority 100
 standby 6 ip 100.0.0.1
!
interface Ethernet1/1
 description LAN-B link to firewall F-2B
 ip address 101.0.0.2 255.255.255.0 secondary
 no ip redirects
 standby 7 priority 200
 standby 7 preempt
 standby 7 ip 101.0.0.1
!
router ospf 60000
 passive-interface Serial0/0
 network 100.0.0.0 0.0.0.255 area 1.2.3.4
 network 101.0.0.0 0.0.0.255 area 1.2.3.4
 network 120.0.0.0 0.0.0.3 area 1.2.3.4
 network 192.168.0.1 0.0.0.0 area 1.2.3.4
!
router bgp 60000
 network 100.0.0.0 mask 255.255.255.0
 network 101.0.0.0 mask 255.255.255.0
 neighbor 120.0.0.2 remote-as 54321
 neighbor 120.0.0.2 filter-list 10 out
 neighbor 192.168.0.1 remote-as 60000
 neighbor 192.168.0.1 update-source Loopback0
!
ip classless
!
ip as-path access-list 10 permit ^(_60000)*$
!
end