From: Hamele Kassa (hkassa@attrmc.net)
Date: Wed Oct 23 2002 - 19:57:42 GMT-3
> I believe it consider it as a host route. Try a wild card mask if you
want
> to include the whole class A net.
>
> r10-3620(config)#ip access-list standard test
> r10-3620(config-std-nacl)#deny 10.1.1.0 0.0.0.255
> r10-3620(config-std-nacl)#permit 10.0.0.0 0.255.255.255
> r10-3620(config-std-nacl)#^Z
> r10-3620#sh access
> r10-3620#sh access-list
> Standard IP access list test
> deny 10.1.1.0, wildcard bits 0.0.0.255
> permit 10.0.0.0, wildcard bits 0.255.255.255
> r10-3620#
>
> Regards,
> Hk
> ----- Original Message -----
> From: "Jaspreet Bhatia" <jasbhati@cisco.com>
> To: <ccielab@groupstudy.com>
> Sent: Wednesday, October 23, 2002 4:55 PM
> Subject: Why is this happening ?
>
>
> > Folks,
> > I am trying to understand why this Named ACL is behaving
> > like this
> >
> > First I make the NACL
> >
> > Router#conf t
> > Enter configuration commands, one per line. End with CNTL/Z.
> > Router(config)#ip access-list standard BGP-ROUTE-TO-USTRUST
> > Router(config-std-nacl)#permit 192.168.107.0
> > Router(config-std-nacl)#permit 162.93.0.0
> > Router(config-std-nacl)#deny 10.191.0.0 0.0.255.255
> > Router(config-std-nacl)#deny 10.190.0.0 0.0.255.255
> > Router(config-std-nacl)#permit 10.0.0.0
> > Router(config-std-nacl)#permit 172.16.0.0
> > Router(config-std-nacl)#end
> > Router#w
> > 1d22h: %SYS-5-CONFIG_I: Configured from console by consoler m
> > Building configuration...
> > [OK]
> >
> >
> >
> > Then when I display the ACL the order of the permit and deny statements
> > comes up all messed up . Am I missing something really fundamental here
?
> >
> >
> > Router#sho ip access BGP-ROUTE-TO-USTRUST
> > Standard IP access list BGP-ROUTE-TO-USTRUST
> > permit 192.168.107.0
> > permit 10.0.0.0
> > permit 172.16.0.0
> > permit 162.93.0.0
> > deny 10.191.0.0, wildcard bits 0.0.255.255
> > deny 10.190.0.0, wildcard bits 0.0.255.255
> > Router#
> >
> >
> > Thanks
> >
> > ===========================================================
> > | | | Jaspreet Bhatia, CCIE # 10347
> > ||| ||| | High Touch Technical Support
> > .:|||||:..:|||||:. | Phone: 408.527.0303
> > Cisco Systems, Inc. | Fax: 408.527.2281
> > | 24x7 Support Center: 800.495.9121
> > ===========================================================
This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:54 GMT-3