Re: Access-list

From: Leigh Harrison (ccileigh@gmail.com)
Date: Mon Jun 05 2006 - 06:30:54 ART


Hi there Matt,

Yes it is normal for the router to correct your inputs to access
lists. The address that you put in should have been corrected:-

011010001 = 105 - your third octet
000000011 = 3 - the wildcard mask

the "0" means that the bit cannot change and the "1" means that it can
change. Using 3 as a wildcard mask you can change the last to bits, so
that means that the last "1" in you third octet is not used in
specifying the base address to apply the mask to. Remember - only the
"0"'s are not changed.

Hope that helps,
LH

Matt Clark wrote:
> Hi Group
>
>
>
> I have been playing with ACLs and bit boundaries during the course of my
> studies and was wondering if anyone had seen this "quirk"
>
> So we have 4 networks and have to use only one filtering statement.
>
>
>
> The networks advertised are as follows:
>
> 192.168.105.0/24
>
> 192.168.106.0/24
>
> 192.168.107.0/24
>
> 192.168.108.0/24
>
>
>
> Allow only the first three 105,106,107 to be advertised. Now I used
> 192.168.105.0 0.0.3.255 which I know is not on a bit number but the IOS
> allowed it but at the same time changed it 192.168.104.0 0.0.3.255 in the
> running-config.
>
>
>
> Is this normal? Does the IOS correct anything else?
>
>
>
> Matt
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:32 ART