Re: wildcard mask question

From: Dave Temkin (dave@ordinaryworld.com)
Date: Sun Oct 30 2005 - 20:36:24 GMT-3


I would say if they say "Only allow x.x.x.x/24", then you should go with
0.0.3.0 , because otherwise you could potentially allow /24 and larger
prefixes with the ACL.

-Dave

On Sun, 30 Oct 2005, Montiean wrote:

> Folks,
> Just want to get the idea on wildcard mask using acl in the lab.
> For an example, let say we need to use only one statement in acl to filter
> routes below
>
> 192.168.20.0/24
> 192.168.21.0/24
> 192.168.22.0/24
> 192.168.23.0/24
>
> So we can use either ways as below
>
> access-list 1 permit 192.168.20.0 0.0.3.0
> or
> access-list 1 permit 192.168.20.0 0.0.3.255
>
> The result is going to be the same but which way should be right in the lab.
> Any comments would be appreciate.
>
> Thanks,
> Montiean
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:55 GMT-3