RE: Inverse mask question - How - ???? [bcc][faked-from][bayes]

From: marvin greenlee (marvin@ccbootcamp.com)
Date: Fri Dec 24 2004 - 15:04:08 GMT-3


If they ask for fewest lines, and that no additional hosts are blocked, I
would lean towards B.

If they just asked that no additional hosts were blocked, and did not
specify that you should use the least number of lines, then either would be
correct.

If they asked that no additional hosts were blocked, and specified that your
access-list could only use a single permit statement, then A would be
correct.

- Marvin Greenlee, CCIE#12237, CCSI# 30483
Network Learning Inc
marvin@ccbootcamp.com
www.ccbootcamp.com (Cisco Training)

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Kirk
Graham
Sent: Friday, December 24, 2004 9:48 AM
To: ccielab@groupstudy.com
Subject: RE: Inverse mask question - How - ???? [bcc][faked-from][bayes]
Importance: Low

As usual more than one way to skin a cat.

Okay, so this demands the question....

Which would be the "right" answer for a CCIE lab???

A)

access-list 1 deny 10.10.10.100 0.0.0.3
access-list 1 deny 10.10.10.104 0.0.0.7
access-list 1 deny 10.10.10.112 0.0.0.15
access-list 1 deny 10.10.10.128 0.0.0.15
access-list 1 deny 10.10.10.144 0.0.0.3
access-list 1 deny 10.10.10.148 0.0.0.1
access-list 1 deny 10.10.10.150 0.0.0.0
access-list 1 permit any

or B)

access-list 1 permit 10.10.10.96 0.0.0.3
access-list 1 deny 10.10.10.96 0.0.0.31
access-list 1 permit 10.10.10.151 0.0.0.0
access-list 1 permit 10.10.10.152 0.0.0.7
access-list 1 deny 10.10.10.128 0.0.0.31
access-list 1 permit any

Looks like B has fewer lines, but both are correct.

I'm just curious. I have no desire to take the lab.

--kg



This archive was generated by hypermail 2.1.4 : Mon Jan 03 2005 - 10:31:30 GMT-3