RE: Extended Access List [bcc][faked-from]

From: marvin greenlee (marvin@ccbootcamp.com)
Date: Sat Feb 12 2005 - 23:13:41 GMT-3


"...To permit only supernet 10.10.0.0/19, we use an extended access list,
such as access-list 101 permit ip 10.10.0.0 0.0.0.0 255.255.224.0 0.0.0.0.
The format of the extended access-list command is as follows:

access-list <access-list-number> {deny|permit}
protocol source source-wildcard mask mask-wildcard ..."

Cisco - How to Block One or More Networks From a BGP Peer -
http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a00801310cb
.shtml

Marvin Greenlee, CCIE#12237, CCSI# 30483
Network Learning Inc
marvin@ccbootcamp.com
www.ccbootcamp.com (Cisco Training)

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of k c
Sent: Saturday, February 12, 2005 1:30 AM
To: ccielab@groupstudy.com
Subject: Extended Access List [bcc][faked-from]
Importance: Low

Hi Group,

 

How can the following extended access-list only allow 172.0.0.0 networks
with masks between 18 and 25 bits? Any URLs or related document?

access-list 100 permit ip 172.0.0.0 0.255.255.255 255.255.192.0 0.0.63.128
 
Thanks.

---------------------------------
7s&~D@1f2D$@&l : 'd(l$M=t$H



This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:20 GMT-3