RE: Inverse mask question - How - ???? [bcc][faked-from][bayes]

From: Scott Morris (swm@emanon.com)
Date: Fri Dec 24 2004 - 16:34:50 GMT-3


Succinct should always be preferred. But you're right in pointing out that
it really depends on how things are asked.

The wording is often more important than what we deem a "possible" answer.
As stated, there are many ways to skin cats. At least 101 as I recall. :)

Watch the wording though to tell you whether they care or not. It is likely
that more often than not, they care. At least if the scenario is solely
about making an access list. ;)

Happy Holidays to all!

 
Scott Morris, MCSE, CCDP, CCIE4 (R&S/ISP-Dial/Security/Service Provider)
#4713, JNCIP, CCNA-WAN Switching, CCSP, Cable Communications Specialist, IP
Telephony Support Specialist, IP Telephony Design Specialist, CISSP
CCSI #21903
swm@emanon.com
 
 
 

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
marvin greenlee
Sent: Friday, December 24, 2004 1:04 PM
To: 'Kirk Graham'; ccielab@groupstudy.com
Subject: RE: Inverse mask question - How - ???? [bcc][faked-from][bayes]

If they ask for fewest lines, and that no additional hosts are blocked, I
would lean towards B.

If they just asked that no additional hosts were blocked, and did not
specify that you should use the least number of lines, then either would be
correct.

If they asked that no additional hosts were blocked, and specified that your
access-list could only use a single permit statement, then A would be
correct.

- Marvin Greenlee, CCIE#12237, CCSI# 30483 Network Learning Inc
marvin@ccbootcamp.com www.ccbootcamp.com (Cisco Training)

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Kirk
Graham
Sent: Friday, December 24, 2004 9:48 AM
To: ccielab@groupstudy.com
Subject: RE: Inverse mask question - How - ???? [bcc][faked-from][bayes]
Importance: Low

As usual more than one way to skin a cat.

Okay, so this demands the question....

Which would be the "right" answer for a CCIE lab???

A)

access-list 1 deny 10.10.10.100 0.0.0.3
access-list 1 deny 10.10.10.104 0.0.0.7
access-list 1 deny 10.10.10.112 0.0.0.15 access-list 1 deny 10.10.10.128
0.0.0.15 access-list 1 deny 10.10.10.144 0.0.0.3 access-list 1 deny
10.10.10.148 0.0.0.1 access-list 1 deny 10.10.10.150 0.0.0.0 access-list 1
permit any

or B)

access-list 1 permit 10.10.10.96 0.0.0.3 access-list 1 deny 10.10.10.96
0.0.0.31 access-list 1 permit 10.10.10.151 0.0.0.0 access-list 1 permit
10.10.10.152 0.0.0.7 access-list 1 deny 10.10.10.128 0.0.0.31 access-list 1
permit any

Looks like B has fewer lines, but both are correct.

I'm just curious. I have no desire to take the lab.

--kg



This archive was generated by hypermail 2.1.4 : Mon Jan 03 2005 - 10:31:30 GMT-3