From: Andrew Chong (achong@xxxxxxxxxxxxxx)
Date: Sat Apr 28 2001 - 03:19:50 GMT-3
Decnet isn't covered in CCIE Lab exam anymore. However, it's a good exercise
in access list and it's still a possible topic in the written exam.
Decnet addressing is 16 bits with most significant 6 bits as Area number
(range 0-63) and remaining 10 bits as address (range 1-1023) within the
area.
So here is what the filter should look like:
access-list 300 permit 10.0 0.15 - this allow host 10.1-15
access-list 300 permit 10.16 0.0 - this allow host 10.16
access-list 300 deny 10.0 0.127 - this deny host 10.17-127
access-list 300 deny 10.128 0.15 - this deny host 10.128-143
access-list 300 deny 10.144 0.7 - this deny host 10.144-151
access-list 300 deny 10.152 0.0 - this deny host 10.152
access-list 300 permit 0.0 63.1023 - this permit any other decnet
address
interface xxx
Decnet-access-group 300
So overall the access-list will deny address 10.17 to 10.152 and allow any
other addresses.
Andrew
----- Original Message -----
From: "Sorin Suru" <sorin3177@hotmail.com>
To: <ccielab@groupstudy.com>
Sent: Saturday, April 28, 2001 1:50 PM
Subject: AL/DECNET!
> One of the lab's requirements I am working on is to prevent access to
DECNET
> hosts with the address of 10.17 through 10.152
> I would start with
> access-list 300 permit 10.16.0.0
> access-list 300 deny 10.17.0.0
> access-list 300 deny 10.152.0.0
> access-list 300 permit 10.0.0.1(I am lost here)
> then I would apply it to
> int e0
> decnet access-group 300
> How many entries do I need to cover this range?Is there a formula to
> calculate this?
> Thank you
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:00 GMT-3