From: none (alsontra@hotmail.com)
Date: Tue Oct 05 2004 - 10:54:08 GMT-3
Matt, should your second line be as follows? (if you were using ext. ACL of
course)
172.16.0.0 - 172.31.255.255 (172.16/12 prefix) <range>
ip access-list extended RFC1918
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
permit ip any any
Thanks
Alsontra
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Matthew Seppeler
Sent: Tuesday, October 05, 2004 8:29 AM
To: zou wei; ccielab@groupstudy.com
Subject: RE: Filtering private ip address
Here you go.
access-list 1 deny 10.0.0.0 0.255.255.255
access-list 1 deny 172.0.0.0 0.31.255.255
access-list 1 deny 192.168.0.0 0.0.255.255
access-list 1 permit any
Any fewer lines than this in trying to merge these network addresses
into one or two statements will end up excluding more networks than you
intend to filter.
Matt Seppeler
InterNetwork Experts
Email: mseppeler@inetx.com
-----Original Message-----
From: zou wei [mailto:zwzq@hotmail.com]
Sent: Tuesday, October 05, 2004 2:48 AM
To: ccielab@groupstudy.com
Subject: Filtering private ip address
Hi:
Could anyone tell me how to filter private addresses using the least
commands?
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
Thanks
Wei
------------------------------------------------------------------------
Dont just search. Find. Check out the new MSN Search!
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:43 GMT-3