From: Hamele Kassa (hkassa@attrmc.net)
Date: Wed Oct 23 2002 - 19:30:35 GMT-3
I believe it consider it as a host route. Try a wild card mask if you want
to include the whole class A net.
r10-3620(config)#ip access-list standard test
r10-3620(config-std-nacl)#deny 10.1.1.0 0.0.0.255
r10-3620(config-std-nacl)#permit 10.0.0.0 0.255.255.255
r10-3620(config-std-nacl)#^Z
r10-3620#sh access
r10-3620#sh access-list
Standard IP access list test
deny 10.1.1.0, wildcard bits 0.0.0.255
permit 10.0.0.0, wildcard bits 0.255.255.255
r10-3620#
Regards,
Hk
----- Original Message -----
From: "Jaspreet Bhatia" <jasbhati@cisco.com>
To: <ccielab@groupstudy.com>
Sent: Wednesday, October 23, 2002 4:55 PM
Subject: Why is this happening ?
> Folks,
> I am trying to understand why this Named ACL is behaving
> like this
>
> First I make the NACL
>
> Router#conf t
> Enter configuration commands, one per line. End with CNTL/Z.
> Router(config)#ip access-list standard BGP-ROUTE-TO-USTRUST
> Router(config-std-nacl)#permit 192.168.107.0
> Router(config-std-nacl)#permit 162.93.0.0
> Router(config-std-nacl)#deny 10.191.0.0 0.0.255.255
> Router(config-std-nacl)#deny 10.190.0.0 0.0.255.255
> Router(config-std-nacl)#permit 10.0.0.0
> Router(config-std-nacl)#permit 172.16.0.0
> Router(config-std-nacl)#end
> Router#w
> 1d22h: %SYS-5-CONFIG_I: Configured from console by consoler m
> Building configuration...
> [OK]
>
>
>
> Then when I display the ACL the order of the permit and deny statements
> comes up all messed up . Am I missing something really fundamental here ?
>
>
> Router#sho ip access BGP-ROUTE-TO-USTRUST
> Standard IP access list BGP-ROUTE-TO-USTRUST
> permit 192.168.107.0
> permit 10.0.0.0
> permit 172.16.0.0
> permit 162.93.0.0
> deny 10.191.0.0, wildcard bits 0.0.255.255
> deny 10.190.0.0, wildcard bits 0.0.255.255
> Router#
>
>
> Thanks
>
> ===========================================================
> | | | Jaspreet Bhatia, CCIE # 10347
> ||| ||| | High Touch Technical Support
> .:|||||:..:|||||:. | Phone: 408.527.0303
> Cisco Systems, Inc. | Fax: 408.527.2281
> | 24x7 Support Center: 800.495.9121
> ===========================================================
This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:54 GMT-3