RE: ACL question

From: Scott Morris (swm@xxxxxxxxxx)
Date: Sun Feb 17 2002 - 02:51:46 GMT-3


   
Nope. Still allows too much in. You wouldn't be given explicit
instructions like that only to allow that PLUS MORE in. Think!

The CCIE lab (and real life for that matter) is not about the
easiest/quickest solution! It's about the most thorough and accurate
solution.

Scott

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
yuen me
Sent: Saturday, February 16, 2002 8:31 PM
To: james.xu@eds.com; labccie@yahoo.com; swm@emanon.com;
Sam.MicroGate@usa.telekom.de; ccielab@groupstudy.com
Subject: RE: ACL question

James,

U are right. As long as the MSB of the 3rd byte is 0, the mask is fine.

Yuenme

>From: "Xu, James" <james.xu@eds.com>
>Reply-To: "Xu, James" <james.xu@eds.com>
>To: "'Lab Candidate'" <labccie@yahoo.com>, Scott Morris <swm@emanon.com>,
> Sam.MicroGate@usa.telekom.de, ccielab@groupstudy.com
>Subject: RE: ACL question
>Date: Wed, 13 Feb 2002 18:00:59 -0500
>
>Guys:
>
>Am I missing something here?
>
>I think each of his access-list will work, even if they are not do
>precisely
>match.
>access-list 1 permit 192.168.123.0 0.0.7.255
>will permit every routes between 192.168.120.0 and 192.168.127.0, and
>implicitly deny any other routes, which includes 128, and 129.
>
>James
>
>-----Original Message-----
>From: Lab Candidate [mailto:labccie@yahoo.com]
>Sent: Wednesday, February 13, 2002 5:32 PM
>To: Scott Morris; Sam.MicroGate@usa.telekom.de; ccielab@groupstudy.com
>Subject: RE: ACL question
>
>
>I'd say access-list 1 is right, it can do what he is asking for.
>
>--- Scott Morris <swm@emanon.com> wrote:
> > F. None of the above...
> >
> > Because of bit boundaries though, you can't summarize quite so nicely.
> >
> > access-list 6 permit 192.168.123.0 0.0.0.255
> > access-list 6 permit 192.168.124.0 0.0.3.255
> >
> > That will cover 123, 124, 125, 126 and 127. The implicit deny will
>catch
> > 128 and 129....
> >
> > Hope that helps.
> >
> > Scott
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> > Sam.MicroGate@usa.telekom.de
> > Sent: Wednesday, February 13, 2002 4:02 PM
> > To: ccielab@groupstudy.com
> > Subject: ACL question
> >
> >
> > Suppose that the backbone is advertising the following routes:
> > 192.168.123.0/24
> > 192.168.124.0/24
> > 192.168.125.0/24
> > 192.168.126.0/24
> > 192.168.127.0/24
> > 192.168.128.0/24
> > 192.168.129.0/24
> > I need to filter .128 and .129 and pass every thing else. which of the
> > following access list is correct
> > access-list 1 permit 192.168.123.0 0.0.7.255 or
> > access-list 2 permit 192.168.124.0 0.0.7.255 or
> > access-list 3 permit 192.168.125.0 0.0.7.255 or
> > access-list 4 permit 192.168.126.0 0.0.7.255 or
> > access-list 5 permit 192.168.127.0 0.0.7.255



This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 13:46:25 GMT-3