From: omar guarisco (oguarisco44@xxxxxxxxxxx)
Date: Wed Jan 09 2002 - 21:28:46 GMT-3
Hi,
Try this when using distribution-list in association with Extended AL
Sample config:
Router ospf 10
network 172.16.1.0 0.0.0.255 area 0
network 10.0.0.0 0.0.255.255 area 0
!
Router Rip
Network 172.168.1.0
Redistribute OSPF 10 metric 2
distribute-list 100 in
Instead of defining AL using traditional method (Wildcard mask)
Access-list 100 permit IP 172.16.1.27 0.0.0.15 any
Access-list 100 permit IP 172.16.1.17 0.0.0.15 any
you can filter networks that you need to permit using the following syntax
with an Extended AL
Access-list 100 permit IP host 172.16.1.27 host 255.255.255.240
Access-list 100 permit IP host 172.16.1.17 host 255.255.255.240
I've been told that when you want to filter some networks using AL extended
you have to use this syntax (strange isn't it ???)
Access-list 100 permit ip host "NETWORK" host "SUBNET MASKS"
This assure you that the subnet with the specified mask will be permitted or
denied depending on what you have configured....
Omar
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:56:22 GMT-3