From: Jake Nesbitt (jake.nesbitt@xxxxxxxxxxx)
Date: Thu Aug 22 2002 - 23:58:34 GMT-3
It appears you are trying to use a network mask with an IPX network
access-list. You can only use network masks with an extended IPX
access-list.
Watch the wrap:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122sup/122cs
um/csum1/122csatk/2sfipx1.htm
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Desimone, Aurelio
Sent: Thursday, August 22, 2002 7:55 PM
To: 'ccielab@groupstudy.com'
Subject: IPX network filtering - why extended access-list?
> I was doing Network Force lab2 and the ipx portion asked you to filter all
> ipx networks that begin with ABC to a certain neighbor (via eigrp). I
> thought a standard access-list would do it:
>
> access-list 801 deny ABC00000 FFFFF
> access-list 801 deny permit FFFFFFFF
>
> ipx router eigrp 1
> distribute-list 801 out Serial2/0.1
>
> But the networks still get through, even after reloading the routers.
>
> Only when I use an extended access-list does it work:
>
> access-list 901 deny any ABC00000.0000.0000.0000 FFFFF.ffff.ffff.ffff
> access-list 901 permit any
>
> ipx router eigrp 1
> distribute-list 001 out Serial2/0.1
>
>
> Why doesn't the standard access-list work?
>
>
> Thanks
> Aurelio
This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:48:34 GMT-3