From: Desimone, Aurelio (ADesimone@xxxxxxxxx)
Date: Thu Aug 22 2002 - 20:55:25 GMT-3
> I was doing Network Force lab2 and the ipx portion asked you to filter all
> ipx networks that begin with ABC to a certain neighbor (via eigrp). I
> thought a standard access-list would do it:
>
> access-list 801 deny ABC00000 FFFFF
> access-list 801 deny permit FFFFFFFF
>
> ipx router eigrp 1
> distribute-list 801 out Serial2/0.1
>
> But the networks still get through, even after reloading the routers.
>
> Only when I use an extended access-list does it work:
>
> access-list 901 deny any ABC00000.0000.0000.0000 FFFFF.ffff.ffff.ffff
> access-list 901 permit any
>
> ipx router eigrp 1
> distribute-list 001 out Serial2/0.1
>
>
> Why doesn't the standard access-list work?
>
>
> Thanks
> Aurelio
This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:48:34 GMT-3