From: Scott Morris (swm@emanon.com)
Date: Sat Jul 24 2004 - 13:18:00 GMT-3
239 is a /8 for private multicasts. 224/4 is ALL multicast ranges.
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, CISSP,
JNCIP, et al.
IPExpert CCIE Program Manager
IPExpert Sr. Technical Instructor
swm@emanon.com/smorris@ipexpert.net
http://www.ipexpert.net
-----Original Message-----
From: Joseph D. Phillips [mailto:josephdphillips@fastmail.us]
Sent: Saturday, July 24, 2004 9:25 AM
To: mani poopal; Scott Morris; alsontra@hotmail.com; 'Brian McGahan'; group
study
Subject: RE: Administrativly scooped address
So how does the 239.0.0.0 address space mask out? it's not /24. Is it /4?
Let's say a permit or deny statement.... per 239.0.0.0 240.255.255.255?
On Sat, 24 Jul 2004 06:13:56 -0700 (PDT), "mani poopal"
<mani_ccie@yahoo.com> said:
> Hi,
>
> (A.)RFC1918 ranges are what Scott specified:Private IPv4 addresses
> (10.x.x.x.x,172.16.x.x and 192.168.x.x,)
>
> (B.)Multicast Administratively scoped addresses(Similar to private
> address)
> 239.0.0.0 - 239.255.255.255
>
> Pay a special attention to wording in the exam
>
> thanks
>
> Mani
>
> Scott Morris <swm@emanon.com> wrote:
> Unless your told to, why are you including multicast and expirimental
> ranges?
>
> By your wording, the 1918 addresses are:
>
> 3. Private Address Space
>
> The Internet Assigned Numbers Authority (IANA) has reserved the
> following three blocks of the IP address space for private internets:
>
> 10.0.0.0 - 10.255.255.255 (10/8 prefix) 172.16.0.0 - 172.31.255.255
> (172.16/12 prefix) 192.168.0.0 - 192.168.255.255 (192.168/16 prefix)
>
> (Which of course, could be verified by going to google and searching
> for RFC
> 1918) :)
>
> HTH,
>
>
> Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
> CISSP, JNCIP, et al.
> IPExpert CCIE Program Manager
> IPExpert Sr. Technical Instructor
> swm@emanon.com/smorris@ipexpert.net
> http://www.ipexpert.net
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> Of alsontra@hotmail.com
> Sent: Friday, July 23, 2004 6:33 PM
> To: Brian McGahan; ccielab@groupstudy.com
> Subject: Re: Administrativly scooped address
>
> Thanks Brain/All
>
> but..... I'm only interested in verifying 1918 addresses. Would the
> following be considered complete?
>
> > > ip access-list extended RFC1918
> > > deny ip 10.0.0.0 0.255.255.255 any deny ip 172.16.0.0 0.15.255.255
> > > any deny ip 192.168.0.0 0.0.255.255 any deny ip 224.0.0.0
> > > 15.255.255.255 any deny ip 240.0.0.0 15.255.255.255 any permit ip
> > > any any
> > >
>
>
> ----- Original Message -----
> From: "Brian McGahan"
> To: ;
> Sent: Friday, July 23, 2004 11:33 AM
> Subject: RE: Administrativly scooped address
>
>
> > Al,
> >
> > It depends what you are trying to match, as there is a big
> > difference between "private" addresses and "reserved" addresses.
> >
> > "Private" addresses refer to those defined in RFC1918. These are the
> > 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 addresses.
> >
> > "Reserved" addresses refer to a *much* larger block of addresses,
> > and (just to name a few) include the following:
> >
> > 0.0.0.0/8
> > 1.0.0.0/8
> > 2.0.0.0/8
> > 5.0.0.0/8
> > 7.0.0.0/8
> > 23.0.0.0/8
> > 27.0.0.0/8
> > 31.0.0.0/8
> > 36.0.0.0/8
> > 37.0.0.0/8
> > 39.0.0.0/8
> > 41.0.0.0/8
> > 42.0.0.0/8
> > 71.0.0.0/8
> > 72.0.0.0/8
> > 73.0.0.0/8
> > 74.0.0.0/8
> > 75.0.0.0/8
> > 76.0.0.0/8
> > 77.0.0.0/8
> > 78.0.0.0/8
> > 79.0.0.0/8
> > 89.0.0.0/8
> > 90.0.0.0/8
> > 91.0.0.0/8
> > 92.0.0.0/8
> > 93.0.0.0/8
> > 94.0.0.0/8
> > 95.0.0.0/8
> > 96.0.0.0/8
> > 97.0.0.0/8
> > 98.0.0.0/8
> > 99.0.0.0/8
> > 100.0.0.0/8
> > 101.0.0.0/8
> > 102.0.0.0/8
> > 103.0.0.0/8
> > 104.0.0.0/8
> > 105.0.0.0/8
> > 106.0.0.0/8
> > 107.0.0.0/8
> > 108.0.0.0/8
> > 109.0.0.0/8
> > 110.0.0.0/8
> > 111.0.0.0/8
> > 112.0.0.0/8
> > 113.0.0.0/8
> > 114.0.0.0/8
> > 115.0.0.0/8
> > 116.0.0.0/8
> > 117.0.0.0/8
> > 118.0.0.0/8
> > 119.0.0.0/8
> > 120.0.0.0/8
> > 121.0.0.0/8
> > 122.0.0.0/8
> > 123.0.0.0/8
> > 124.0.0.0/8
> > 125.0.0.0/8
> > 126.0.0.0/8
> > 127.0.0.0/8
> > 173.0.0.0/8
> > 174.0.0.0/8
> > 175.0.0.0/8
> > 176.0.0.0/8
> > 177.0.0.0/8
> > 178.0.0.0/8
> > 179.0.0.0/8
> > 180.0.0.0/8
> > 181.0.0.0/8
> > 182.0.0.0/8
> > 183.0.0.0/8
> > 184.0.0.0/8
> > 185.0.0.0/8
> > 186.0.0.0/8
> > 187.0.0.0/8
> > 189.0.0.0/8
> > 190.0.0.0/8
> > 197.0.0.0/8
> > 223.0.0.0/8
> > 240.0.0.0/8
> > 241.0.0.0/8
> > 242.0.0.0/8
> > 243.0.0.0/8
> > 244.0.0.0/8
> > 245.0.0.0/8
> > 246.0.0.0/8
> > 247.0.0.0/8
> > 248.0.0.0/8
> > 249.0.0.0/8
> > 250.0.0.0/8
> > 251.0.0.0/8
> > 252.0.0.0/8
> > 253.0.0.0/8
> > 254.0.0.0/8
> > 255.0.0.0/8
> >
> > There are also many addresses that are not included in the
> > "reserved" range that are not valid addresses. These addresses are
> > tracked on a list called the "bogon" list, and are addresses that
> > are not yet allocated, hence not valid (bogus). For more info on the
> > bogon list see:
> >
> > http://www.completewhois.com/bogons/data/bogons-cidr-all.txt
> >
> >
> > HTH,
> >
> > Brian McGahan, CCIE #8593
> > bmcgahan@internetworkexpert.com
> >
> > Internetwork Expert, Inc.
> > http://www.InternetworkExpert.com
> > Toll Free: 877-224-8987 x 705
> > Outside US: 775-826-4344 x 705
> > 24/7 Support: http://forum.internetworkexpert.com
> > Live Chat: http://www.internetworkexpert.com/chat/
> >
> >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> > > Behalf
> > Of
> > > alsontra@hotmail.com
> > > Sent: Thursday, July 22, 2004 10:42 PM
> > > To: ccielab@groupstudy.com
> > > Subject: Administrativly scooped address
> > >
> > > Group,
> > > If asked to block private ip and multicast ranges, would the
> > > following accomplish the task? I'm assuming there is an error in
> > there
> > > somewhere. I've checked this several times, but apparently I'm
> > > somehow making mistakes?
> > >
> > > ADMIN SCOPE FOR IPV4-
> > >
> > > ip access-list extended RFC1918
> > > deny ip 10.0.0.0 0.255.255.255 any deny ip 172.16.0.0 0.15.255.255
> > > any deny ip 192.168.0.0 0.0.255.255 any deny ip 224.0.0.0
> > > 15.255.255.255 any deny ip 240.0.0.0 15.255.255.255 any permit ip
> > > any any
> > >
> > > ADMIN SCOPE FOR IPV4 MULTICAST
> > >
> > > ip access-list extended RFC2365
> > > deny ip 239.0.0.0 0.255.255.255 any permit ip any any
> > >
> > > Thanks,
> > > Alsontra
> > >
> > >
> > ____________________________________________________________________
> > ___
> > > Please help support GroupStudy by purchasing your study materials
> > from:
> > > http://shop.groupstudy.com
> > >
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> > ____________________________________________________________________
> > ___ Please help support GroupStudy by purchasing your study
> > materials from:
> > http://shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> ______________________________________________________________________
> _ Please help support GroupStudy by purchasing your study materials
> from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> ______________________________________________________________________
> _ Please help support GroupStudy by purchasing your study materials
> from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> B.ENG,A+,CCNA,CCNP,CCNP-VOICE, CSS1,CNA,MCSE
> (416)431 9929
> MANI_CCIE@YAHOO.COM
>
> ---------------------------------
> Do you Yahoo!?
> New and Improved Yahoo! Mail - 100MB free storage!
>
> ______________________________________________________________________
> _ Please help support GroupStudy by purchasing your study materials
> from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:12:02 GMT-3