RE: Access-list

From: Fowlie, Colin (Colin.Fowlie@aliant.ca)
Date: Mon Jan 24 2005 - 14:33:51 GMT-3


When creating a route filter for BGP, this format of access-list can be
used in lieu of a prefix-list. The first portion (typically the source)
matches the network to be filtered, and the second portion (typically
the destination) matches the subnet mask of the route.

So this list would deny the following routes:

172.16.0.0/22
172.16.1.0/22
172.16.2.0/22
172.16.3.0/22

Based on the fact that you wouldn't have the latter 3 routes in
practice, the wildcard on the source is probably not required. This is
one use that I know of for this type of ACL.

-HTH
Colin

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Hoa Nguyen
Sent: Monday, January 24, 2005 4:28 AM
To: Cisco certification
Subject: Access-list

Hi
Anyone can show me the meaning in detail of this access list ?

access-list 100 deny ip 172.16.0.0 0.0.3.255 255.255.252.0 0.0.0.0

access-list 100 permit ip any any

Thanks



This archive was generated by hypermail 2.1.4 : Wed Feb 02 2005 - 22:10:25 GMT-3