From: ccie candidate (ccie1@xxxxxxxxx)
Date: Thu Aug 15 2002 - 09:00:41 GMT-3
you are right ...what is typed will allow any subnet with mask of 16 up to 23 .
..
i think to allow class B address range , you might use this access list
access-list 10 permit 128.0.0.0 63.255.255.255
the idea is that class B address range always start with 10xxxxxx
this will give you the range from 128 ---> 191 on the first byte of the IP addr
ess
that is all what you want to permit regardless of the mask .
sorry for my previous post ( i hope this one is right too :) )
--On Thu, 15 Aug 2002 11:58:19 Colin Barber wrote: >This is not correct. You are not specifying the class b address range and >therefore thing like 10.0.0.0/16 will also be permitted. > >Colin > >On Thu, 15 Aug 2002 04:57:25 > EbonyGuru wrote: >>Hey Guys, >> >>Can someone please help me check if this is correct: >> >> >>To filter all class B nets: >> >>ip prefix-lis zib seq 10 permit 0.0.0.0/0 ge 16 le 24 >> >>Please also tell me where to find a reference with configuration examples. >> >>TIA. >> >>E'Guru
This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:48:25 GMT-3