Re: BGP aggregate address and suppress access list

From: yuen me (yuen_me@xxxxxxxxxxx)
Date: Sun Feb 10 2002 - 18:47:29 GMT-3


   
Can i rephrase your question that why 2.23.2.0 and 2.27.2.0 are not
suppressed ? You may change your access list to:

>ip access-list standard EVEN
> permit 2.0.0.0 0.254.255.255 log
> permit 2.0.0.0 0."255".254.255 log

yuenme

>From: "Rob Rummel" <Rummel@Hawaii.rr.com>
>Reply-To: "Rob Rummel" <Rummel@Hawaii.rr.com>
>To: <ccielab@groupstudy.com>
>Subject: BGP aggregate address and suppress access list
>Date: Sat, 9 Feb 2002 20:40:15 -1000
>
>While doing a BGP lab I tried to do the following.
>Advertise a aggregate address of 2.0.0.0/8 and allow address that have a
>odd number in the second and third octet to be advertised.
>I made a access list but as you see by the results below the access list
>statement permit 2.0.0.0 0.254.255.255 log seems to be matching
>everything
>With odd or even number in the third octet.
>How does 2.0.0.0 0.254.255.255 = 2.2.27.0
>I'm missing something here.
>
>!
>router bgp 2
> bgp log-neighbor-changes
> network 2.2.2.0 mask 255.255.255.0
> network 2.2.22.0 mask 255.255.255.0
> network 2.2.23.2 mask 255.255.255.0
> network 2.2.24.0 mask 255.255.255.0
> network 2.2.27.0 mask 255.255.255.0
> network 2.22.2.0 mask 255.255.255.0
> network 2.22.22.0 mask 255.255.255.0
> network 2.23.2.0 mask 255.255.255.0
> network 2.27.2.0 mask 255.255.255.0
> network 22.2.2.0 mask 255.255.255.0
> aggregate-address 2.0.0.0 255.0.0.0 suppress-map EVEN
> neighbor 10.3.2.3 remote-as 3
> neighbor 200.2.8.8 remote-as 8
> neighbor 200.7.2.4 remote-as 145
> neighbor 200.7.2.7 remote-as 76
>
>!
>ip access-list standard EVEN
> permit 2.0.0.0 0.254.255.255 log
> permit 2.2.0.0 0.0.254.255 log
>route-map EVEN permit 10
> match ip address EVEN
>
>*> 2.0.0.0 0.0.0.0 32768 i
>s> 2.2.2.0/24 0.0.0.0 0 32768 i
>s> 2.2.22.0/24 0.0.0.0 0 32768 i
>s> 2.2.24.0/24 0.0.0.0 0 32768 i
>s> 2.2.27.0/24 0.0.0.0 0 32768 i
>s> 2.22.2.0/24 0.0.0.0 0 32768 i
>s> 2.22.22.0/24 0.0.0.0 0 32768 i
>*> 2.23.2.0/24 0.0.0.0 0 32768 i
>*> 2.27.2.0/24 0.0.0.0 0 32768 i
>*> 3.3.3.0/24 10.3.2.3 0 0 3 i
>
>R2#sh ip access-lists
>Standard IP access list EVEN
> permit 2.0.0.0, wildcard bits 0.254.255.255 log (6 matches) check=2
> permit 2.2.0.0, wildcard bits 0.0.254.255 log check=2
>
>Rob Rummel
>
>
>
>-The faulty interface lies between the chair and the keyboard-
>
>[GroupStudy.com removed an attachment of type image/gif which had a name of
>image001.gif]



This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 13:46:18 GMT-3