From: Herve Bruyere (hbruyere@cisco.com)
Date: Wed Feb 19 2003 - 07:16:08 GMT-3
balaji.balakrishnan wrote:
> Hi Group,
> 
> This is about using  extended access-list to filter bgp routes  instead of  prefix-list . For example, if you want to
> permit only 10.132.0.0/16 and filter more specific routes,  I believe the access-list  should be
> 
> permit ip 10.132.0.0 0.0.255.255 host 255.255.0.0
> 
> But, can anyone explain me, how to interpret the following access-list entries,
> 
In my opinion:
> permit ip  10.0.0.0 0.255.255.255   host  255.255.255.255
matches all 10.x.x.x routes having /32 mask
> permit  ip  host  172.12.10.208   host  255.255.255.252
matches 172.12.10.208/30
> deny  ip 172.12.10.0  0.0.0.255  any
matches 172.12.10.0/24 /25 /26 /27 ....
> 
> Rgds,
> Bala.
> 
-
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:27 GMT-3