Re: IP route filtering question

From: Basel Tashkandi (basel@xxxxxxxxxxxxx)
Date: Fri Nov 30 2001 - 06:43:18 GMT-3


   
Hi Ki,
As you suspected C is the right one but you don't need the mask for the mask
it would be enough to only say
192.168.10.0 0.0.0.255
of course with deny not permit :)
At 23:09 29/11/2001 +0100, Waters, Kivas (UK72) wrote:
>Configuring very specific route filters for route redistribution, split
>horizon issues and general route filtering is important and I want to make
>sure that I get it right in the lab. There appears to be a number of ways
>of implimenting the route filters but what I'm interrested is the ACL's
>defining the routes to be filtered. The question is, what type of route
>filters should be used in which circumstances?
>
>Here is an example ...
>
>Lets say that I wanted to deny the following specific routes from being
>learned by a routing process : 192.168.10.0/24 and 172.16.0.0/12
>
>I suspect that answer c) is most correct but what do you IP routing guru's
>think?
>
>a)
>access-list 7 permit 192.168.10.0
>access-list 7 permit 172.16.0.0
>
>b)
>access-list 7 permit 192.168.10.0 0.0.0.255
>access-list 7 permit 172.16.0.0 0.15.255.255
>
>c)
>access-list 117 permit 192.168.10.0 0.0.0.255 255.255.255.0 0.0.0.0
>access-list 117 permit 172.16.0.0 0.15.255.255 255.240.0.0 0.0.0.0
>
>best regards
>
>Ki



This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:27 GMT-3