RE: Summarizing Access-lists

From: Jonathan V Hays (jhays@jtan.com)
Date: Sun Nov 23 2003 - 12:15:51 GMT-3


Check out this excellent post from Brian McGahan.

http://www.groupstudy.com/archives/ccielab/200303/msg01685.html

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Edward Agostinho
Sent: Sunday, November 23, 2003 9:58 AM
To: ccielab@groupstudy.com
Subject: Summarizing Access-lists

Hi group

How do we summarize access-lists with different subnet masks.

Let's assume you are requested to summarize the following in the least
amount
of lines:

access-list 10 permit 133.6.11.0 0.0.0.127
access-list 10 permit 135.16.171.0 0.0.0.255
access-list 10 permit 172.60.51.0 0.0.0.127
access-list 10 permit 121.15.120.0 0.0.0.31
access-list 10 permit 112.59.9.0 0.0.0.255

Do I attempt to summarize:

access-list 10 permit 133.6.11.0 0.0.0.127
access-list 10 permit 172.60.51.0 0.0.0.127

and

access-list 10 permit 135.16.171.0 0.0.0.255
access-list 10 permit 112.59.9.0 0.0.0.255

and leave

access-list 10 permit 121.15.120.0 0.0.0.31

or do I ignore the masks and do a normal AND and XOR with the network
portion
of the addresses?

I know how to summarize them if they all use /24 as the examples given
by the
rest of the group but never seen one with different subnet masks?

Thanks

Edward



This archive was generated by hypermail 2.1.4 : Fri Dec 12 2003 - 12:29:16 GMT-3