From: Bola Adegbonmire (bolaccie@yahoo.com)
Date: Tue Mar 15 2005 - 17:11:10 GMT-3
I guess so if you have made sure your deny macthes all the routes that ought to be denied.
Ed Lui <edwlui@gmail.com> wrote:I think I can replace the permit all with more specific entry while
still using one line.
What do you think ?
-- Edward (A+, Net+, MCP, MCP+I, MCSE, CCNA, CCNP)On Tue, 15 Mar 2005 08:12:12 -0800 (PST), Bola Adegbonmire wrote: > > > Ed problem with your solution is it will meet minimal requirements, but it > will allow more than the routes specified as the permit any will allow any > routes apart from the denied ones. > > > > I think you should look at the solution that allows only the specified > routes (even if other routes were injected). Though original poster may > clarify requirements. > > > > Bola > > Ed Lui wrote: > deny 210.16.1.0 0.3.0.0 > deny 210.20.1.0 0.0.0.0 > deny 210.30.1.0 0.1.0.0 > permit any > > > Still need 4 lines :( > > -- > Edward > (A+, Net+, MCP, MCP+I, MCSE, CCNA, CCNP) > > > On Mon, 14 Mar 2005 15:02:30 -0500, gladston@br.ibm.com > wrote: > > What would you use as a minimal number of statements to achieve the > follwing result? > > > > Before any filtering, R6 receives these routes: > > > > r6#sir ei > > D 210.16.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.17.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.18.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.19.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.20.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.21.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.23.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.22.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.25.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.24.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.27.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.26.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.29.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.28.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.29.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.30.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.31.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > > > Make a filter with the minimal number of statements to allow in just these > routes: > > > > D 210.21.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.23.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.22.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.25.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.24.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.27.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.26.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.29.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.28.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > D 210.29.1.0/24 [90/2297856] via 150.100.16.1, 00:00:50, Serial0 > > > > The minimal number I got is four statements: > > > > permit 210.21.1.0 > > permit 210.22.1.0 0.1.0.0 > > permit 210.24.1.0 0.3.0.0 > > permit 210.28.1.0 0.1.0.0 > > > > Any other idea? > > > > _______________________________________________________________________ > > Subscription information may be found at: > > http://www.groupstudy.com/list/CCIELab.html > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com
--------------------------------- Do you Yahoo!? Yahoo! Small Business - Try our new resources site!
This archive was generated by hypermail 2.1.4 : Sun Apr 03 2005 - 17:56:46 GMT-3