Re: BGP route filter

From: Herve Bruyere (hbruyere@cisco.com)
Date: Wed Feb 19 2003 - 07:16:08 GMT-3


balaji.balakrishnan wrote:
> Hi Group,
>
> This is about using extended access-list to filter bgp routes instead of prefix-list . For example, if you want to
> permit only 10.132.0.0/16 and filter more specific routes, I believe the access-list should be
>
> permit ip 10.132.0.0 0.0.255.255 host 255.255.0.0
>
> But, can anyone explain me, how to interpret the following access-list entries,
>

In my opinion:

> permit ip 10.0.0.0 0.255.255.255 host 255.255.255.255

matches all 10.x.x.x routes having /32 mask

> permit ip host 172.12.10.208 host 255.255.255.252

matches 172.12.10.208/30

> deny ip 172.12.10.0 0.0.0.255 any

matches 172.12.10.0/24 /25 /26 /27 ....

>
> Rgds,
> Bala.
>

-



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:27 GMT-3