From: Leigh Harrison (ccileigh@gmail.com)
Date: Wed Sep 21 2005 - 05:45:05 GMT-3
Hey there Matthew,
If you just wanted to allow through 10.0.0.0/8 routes, the try this:-
ip access-list 1 permit 10.0.0.0 0.0.0.0
The mask on that wil match everything with the pattern "10.0.0.0" and
nowt else.
LH
mathew wrote:
> Hi All,
>
> Can someone let me know how to build a IP Extended access-list to
> replace a prefix list - ip prefix-list PRIVATE-SUPER permit 10.0.0.0/8?
>
> When I tried using the ACL - "access-list 112 permit ip host 10.0.0.0
> host 255.0.0.0" to filter only 10.0.0.0/8, it did not work.
> However, when I tried the ACL - "access-list 112 permit ip host
> 0.0.0.0 host 0.0.0.0" to filter only 0.0.0.0/0, it worked.
>
> The reason is that there are many routers with ACL 112 and it is easy
> to add the 10.0.0.0/8 with an same ACL.
>
> Thanks for the replies.
>
> mathew
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Oct 02 2005 - 14:40:16 GMT-3