From: Kirk Bollinger (kirk@xxxxxxxxxxxxxxxxx)
Date: Sun Oct 01 2000 - 03:07:19 GMT-3
That makes sense but I don't understand the second example
!do not permit pkts to be routed from networks 991 through 995
access-l 601 permit within 991-995
1) is this just a typo on the DOC CD?
2) are the ranges inclusive or exclusive ie. will 991 OR 995 be permitted
3) Why dows the DOC say this denies 991 through 995??
-Kirk
On Sun, 1 Oct 2000, John Conzone wrote:
> Kirk, the "includes" statement means that if any part of the cable range
> matches the include statement, permit or deny accordingly.
>
> Access-list 601 permit includes 970-990, means that a cable range of 975-995
> will match (be permitted in this case) because the statement INCLUDES
> networks in that range. If ANY network in the cable range matches what is
> specified with INCLUDE, then the whole cable range passes and the applicable
> conditon will be set. (permit or deny)
>
> Within means that the whole cable range must be within the range
> specified in the statement.
>
> Access-list 601 permit within 970-990, means that the same cable range of
> 975-995 will NOT match because all networks in 975-990 do not fall WITHIN
> the range specified. A cable range of 975-985 would macth.
>
> Hope this helps.
>
> ----- Original Message -----
> From: "Kirk Bollinger" <kirk@thebollingers.net>
> To: <ccielab@groupstudy.com>
> Sent: Sunday, October 01, 2000 1:31 AM
> Subject: Appletalk includes and within
>
>
> > Can someone shed some more light on the Appletalk access-list options
> > include and within?
> >
> > >From the Cisco doc here is an example:
> >
> > !do not permit pkts to be routed from networks 970-990
> > access-list 601 deny includes 970-990
> >
> > and then
> >
> > !do not permit pkts to be routed from networks 991 through 995
> > access-l 601 permit within 991-995
> >
> > I just don't get it!
> >
> > Thanks!
> > -Kirk
> > 10 days left
> >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:22 GMT-3