From: none (alsontra@hotmail.com)
Date: Sat Nov 13 2004 - 12:53:07 GMT-3
Try using an extended access-list - I've also attached a previous post from
Brian Dennis. If you can't figure it out I'll explain, but working this out
for your self will do you good. Trust me.
<snip>
Here is the syntax:
access-list <ACL #> permit ip <network> <wildcard mask of network> <subnet
mask> <wildcard mask of subnet mask>
Here are some examples:
access-list 100 permit ip 10.0.0.0 0.0.0.0 255.255.0.0 0.0.0.0 Matches
10.0.0.0/16 - Only
access-list 100 permit ip 10.0.0.0 0.0.0.0 255.255.255.0 0.0.0.0 Matches
10.0.0.0/24 - Only
access-list 100 permit ip 10.1.1.0 0.0.0.0 255.255.255.0 0.0.0.0 Matches
10.1.1.0/24 - Only
access-list 100 permit ip 10.0.0.0 0.0.255.0 255.255.255.0 0.0.0.0 Matches
10.0.X.0/24 - Any number in the 3rd octet of the network with a
/24 subnet mask.
access-list 100 permit ip 10.0.0.0 0.255.255.0 255.255.255.0 0.0.0.0 Matches
10.X.X.0/24 - Any number in the 2nd & 3rd octet of the network with a /24
subnet mask.
access-list 100 permit ip 10.0.0.0 0.255.255.255 255.255.255.240 0.0.0.0
Matches 10.X.X.X/28 - Any number in the 2nd, 3rd & 4th octet of the network
with a /28 subnet mask.
access-list 100 permit ip 10.0.0.0 0.255.255.255 255.255.255.0 0.0.0.255
Matches 10.X.X.X/24 to 10.X.X.X/32 - Any number in the 2nd, 3rd & 4th octet
of the network with a /24 to /32 subnet mask.
access-list 100 permit ip 10.0.0.0 0.255.255.255 255.255.255.128
0.0.0.127
Matches 10.X.X.X/25 to 10.X.X.X/32 - Any number in the 2nd, 3rd & 4th octet
of the network with a /25 to /32 subnet mask
Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)
</snip>
HTH
Alsontra
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Bob
Smith
Sent: Saturday, November 13, 2004 3:11 AM
To: ccielab@groupstudy.com
Subject: Prefix-list
say if i have 5 routes:
192.168.1.0/24
192.168.2.0/24
192.168.3.0/24
192.168.4.0/24
192.168.5.0/24
With a prefix-list, is there anyway to permit say only subnet 3 and 4 with
one line?
Or with a access-list?
If so, can you put the solution in steps and break it out in binary, i have
spent so many hours and reading so many posts, but they seem to be
contradicting themselves...just don't know how it can be done....please help
This archive was generated by hypermail 2.1.4 : Thu Dec 02 2004 - 06:57:43 GMT-3