From: Chua, Parry (Parry.Chua@xxxxxxxxxx)
Date: Sun Feb 10 2002 - 04:34:49 GMT-3
Hi,
>How does 2.0.0.0 0.254.255.255 = 2.2.27.0
Your access list permit 2nd octet with even number, so 2.2.x.y match the
condition.
Regards
Parry
-----Original Message-----
From: Rob Rummel [mailto:Rummel@Hawaii.rr.com]
Sent: Sunday, February 10, 2002 2:40 PM
To: ccielab@groupstudy.com
Subject: BGP aggregate address and suppress access list
While doing a BGP lab I tried to do the following.
Advertise a aggregate address of 2.0.0.0/8 and allow address that have a
odd number in the second and third octet to be advertised.
I made a access list but as you see by the results below the access list
statement permit 2.0.0.0 0.254.255.255 log seems to be matching
everything
With odd or even number in the third octet.
How does 2.0.0.0 0.254.255.255 = 2.2.27.0
I'm missing something here.
!
router bgp 2
bgp log-neighbor-changes
network 2.2.2.0 mask 255.255.255.0
network 2.2.22.0 mask 255.255.255.0
network 2.2.23.2 mask 255.255.255.0
network 2.2.24.0 mask 255.255.255.0
network 2.2.27.0 mask 255.255.255.0
network 2.22.2.0 mask 255.255.255.0
network 2.22.22.0 mask 255.255.255.0
network 2.23.2.0 mask 255.255.255.0
network 2.27.2.0 mask 255.255.255.0
network 22.2.2.0 mask 255.255.255.0
aggregate-address 2.0.0.0 255.0.0.0 suppress-map EVEN
neighbor 10.3.2.3 remote-as 3
neighbor 200.2.8.8 remote-as 8
neighbor 200.7.2.4 remote-as 145
neighbor 200.7.2.7 remote-as 76
!
ip access-list standard EVEN
permit 2.0.0.0 0.254.255.255 log
permit 2.2.0.0 0.0.254.255 log
route-map EVEN permit 10
match ip address EVEN
*> 2.0.0.0 0.0.0.0 32768 i
s> 2.2.2.0/24 0.0.0.0 0 32768 i
s> 2.2.22.0/24 0.0.0.0 0 32768 i
s> 2.2.24.0/24 0.0.0.0 0 32768 i
s> 2.2.27.0/24 0.0.0.0 0 32768 i
s> 2.22.2.0/24 0.0.0.0 0 32768 i
s> 2.22.22.0/24 0.0.0.0 0 32768 i
*> 2.23.2.0/24 0.0.0.0 0 32768 i
*> 2.27.2.0/24 0.0.0.0 0 32768 i
*> 3.3.3.0/24 10.3.2.3 0 0 3 i
R2#sh ip access-lists
Standard IP access list EVEN
permit 2.0.0.0, wildcard bits 0.254.255.255 log (6 matches) check=2
permit 2.2.0.0, wildcard bits 0.0.254.255 log check=2
Rob Rummel
-The faulty interface lies between the chair and the keyboard-
[GroupStudy.com removed an attachment of type image/gif which had a name
of image001.gif]
This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 13:46:18 GMT-3