RE: IP route filtering question

From: Jason Sinclair (sinclairj@xxxxxxxxxxxxxxx)
Date: Thu Nov 29 2001 - 23:31:45 GMT-3


   
B - however they should be deny statements not permit.

Regards,

Jason Sinclair
Manager, Network Support Group
POWERTEL
Ground Level, 55 Clarence Street,
SYDNEY NSW 2000
AUSTRALIA
office: + 61 2 8264 3820
mobile: + 61 2 416 105 858
* sinclairj@powertel.com.au

                -----Original Message-----
                From: Waters, Kivas (UK72)
[mailto:Kivas.Waters@Honeywell.com]
                Sent: Friday, 30 November 2001 08:09
                To: ccielab@groupstudy.com
                Subject: IP route filtering question

                Configuring very specific route filters for route
redistribution, split
                horizon issues and general route filtering is important and
I want to make
                sure that I get it right in the lab. There appears to be a
number of ways
                of implimenting the route filters but what I'm interrested
is the ACL's
                defining the routes to be filtered. The question is, what
type of route
                filters should be used in which circumstances?

                Here is an example ...

                Lets say that I wanted to deny the following specific routes
from being
                learned by a routing process : 192.168.10.0/24 and
172.16.0.0/12

                I suspect that answer c) is most correct but what do you IP
routing guru's
                think?

                a)
                access-list 7 permit 192.168.10.0
                access-list 7 permit 172.16.0.0

                b)
                access-list 7 permit 192.168.10.0 0.0.0.255
                access-list 7 permit 172.16.0.0 0.15.255.255

                c)
                access-list 117 permit 192.168.10.0 0.0.0.255 255.255.255.0
0.0.0.0
                access-list 117 permit 172.16.0.0 0.15.255.255 255.240.0.0
0.0.0.0

                best regards

                Ki
        



This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:26 GMT-3