From: Steve Cromie (scromie@cisco.com)
Date: Fri Sep 12 2003 - 21:47:47 GMT-3
Hi - I need a head check on prefix-lists. I have some practice questions
I am working on but there is no answer key to check myself against. Can
someone please take a look and comment.
Configure a prefix-list that denies all private IP addresses (as defined in
RFC1819).
my solution (with the help of the archives)
ip prefix-list RFC1918 seq 5 deny 10.0.0.0/8 le 32
ip prefix-list RFC1918 seq 10 deny 172.16.0.0/12 le 32
ip prefix-list RFC1918 seq 15 deny 192.168.0.0/16 le 32
The prefix list should also, in selected address ranges, deny small
subnets according to these guidelines:
In address range 193.0.0.0 193.255.255.255, do not accept prefixes
with subnet masks longer than /20.
my solution
ip prefix-list smallsubs seq 20 deny 193.0.0.0/8 ge 21
In address range 128.0.0.0 191.255.255.255, do not accept prefixes
with subnet masks longer than /18.
my solution
ip prefix-list smallsubs seq 25 deny 128.0.0.0/2 ge 19
In address range 0.0.0.0 63.255.255.255, do not accept prefixes with
subnet masks longer than /12.
my solution
ip prefix-list smallsubs seq 30 deny 0.0.0.0/2 ge 13
Never accept prefixes longer than /24.
my solution
ip prefix list smallsubs seq 35 deny 0.0.0.0/24 ge 25
Thanks,
Steve
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:27 GMT-3