RE: Access list

From: Scott, Tyson C (tyson.scott@hp.com)
Date: Wed Mar 31 2004 - 21:36:10 GMT-3


2.28 is close but that will also match

1.6
1.14
1.22
1.30
3.6
3.14
3.22
3.30

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
R. Adjakou/Home
Sent: Wednesday, March 31, 2004 7:13 PM
To: Joseph D. Phillips; Group Study (E-mail)
Subject: Re: Access list

access-list 1 deny x.x.1.0 0.0.2.28
access-list 1 permit any
or
access-list 1 deny x.x.1.28 0.0.2.28
access-list 1 permit any

For explanation read this paper
http://www.internetworkexpert.com/resources/01700370.htm

----- Original Message -----
From: "Joseph D. Phillips" <jphillips@ufcwdrugtrust.org>
To: "Group Study (E-mail)" <ccielab@groupstudy.com>
Sent: Wednesday, March 31, 2004 11:51 PM
Subject: Access list

> I've spent the entire afternoon on a single access list and still
can't
figure out the logic. I've looked up articles, and converted everything
to
binary and still can't make sense of this.
>
> Given the following networks (last two octets relevant), I need to
block
them all in as few lines as possible. Some of you people can do this in
your
heads. Simpletons like me, however, can't.
>
> These are the networks:
>
> 1.2
> 1.10
> 1.18
> 1.26
> 3.2
> 3.10
> 3.18
> 3.26
>
> In binary it looks like:
>
> 1 2 00000001 00000010
> 1 10 00000001 00001010
> 1 18 00000001 00010010
> 1 26 00000001 00011010
> 3 2 00000011 00000010
> 3 10 00000011 00001010
> 3 18 00000011 00010010
> 3 26 00000011 00011010
>
> What do I do after that? I know how to summarize them all into one
statement, but I need specific deny statements that only apply to the
networks to be blocked and to none else.
>
>



This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:50 GMT-3