From: Carlos Marchini (cmarchini@signetdiagnostic.com)
Date: Sat Apr 24 2004 - 20:29:56 GMT-3
I want to setup Private address filtering on my ISP edge router. My ISP uses
the 10.x.x.x network internally.
This is the config that I am working on. Does anyone find anything wrong
here? Should I be blocking the 127.x.x.x network?
Interface S0/0
Description TO ISP
ip address 10.200.1.1 255.255.255.0
ip access-group 103 in
!
access-list 103 permit 10.200.1.0 0.0.0.255 any
access-list 103 deny ip 10.0.0.0 0.255.255.255 any
access-list 103 deny ip 172.16.0.0 0.15.255.255 any
access-list 103 deny ip 192.168.0.0 0.0.255.255 any
access-list 103 deny ip 127.0.0.0 0.255.255.255 any
access-list 103 permit ip any any
Thanks,
Carlos Marchini
This archive was generated by hypermail 2.1.4 : Mon May 03 2004 - 19:48:55 GMT-3