From: haducbinh (haducbinh@vnpro.org)
Date: Mon Dec 04 2006 - 11:04:57 ART
Yes! you're right, I made some wrong! At the octec 2, we have:
3 = 00000011
5 = 00000101
7 = 00000111
XOR = 00000110 = 6
So this ACL is right: access-list 1 deny 51.1.0.1 0.6.0.8 :)
HaDucBinh
Mail: haducbinh@vnpro.org
Phone: +84 908 191 322
---------------------------------------------------------------------------
Vietnamese Professionals (VnPro)
Cisco Authorised Training
149/1D Ung Van Khiem Street, Ward 25, Binh Thanh District, Ho Chi Minh City
Tel: (08) 5124257 - (08) 5125314
Fax: (08) 5124314
Website: http://vnpro.vn
Support Forum: http://vnpro.org
-----Original Message-----
From: Matemane, Walter [mailto:walter.matemane@liberty.co.za]
Sent: Monday, December 04, 2006 8:57 PM
To: Scott Morris; haducbinh; deji500@hotmail.com; ccielab@groupstudy.com
Subject: RE: ACCESS-LIST
AND = 51.1.0.1
XOR = 0.6.0.8
I think access-list 1 deny 51.1.0.1 0.6.0.8 will work.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Scott Morris
Sent: 04 December 2006 03:35 PM
To: 'haducbinh'; deji500@hotmail.com; ccielab@groupstudy.com
Subject: RE: ACCESS-LIST
That would deny .0 and .1 in the first octet and would be rewritten as
51.0.0.1 0.1.0.8....
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPExpert VP - Curriculum Development
IPExpert Sr. Technical Instructor
smorris@ipexpert.com
http://www.ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
haducbinh
Sent: Monday, December 04, 2006 6:16 AM
To: deji500@hotmail.com; ccielab@groupstudy.com
Subject: RE: ACCESS-LIST
You should use this ACL:
access-list 1 deny 51.1.0.1 0.1.0.8
HaDucBinh
Mail: haducbinh@vnpro.org
Phone: +84 908 191 322
------------------------------------------------------------------------
--- Vietnamese Professionals (VnPro) Cisco Authorised Training 149/1D Ung Van Khiem Street, Ward 25, Binh Thanh District, Ho Chi Minh City Tel: (08) 5124257 - (08) 5125314 Fax: (08) 5124314 Website: http://vnpro.vn Support Forum: http://vnpro.org -----Original Message----- From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of deji500@hotmail.com Sent: Sunday, December 03, 2006 6:09 PM To: ccielab@groupstudy.com Subject: ACCESS-LISTHello group
To match and deny the following IP address: 51.3.0.1 51.5.0.1 51.7.0.1 51.3.0.9 51.5.0.9 51.7.0.9
will this accesslist work? access-list 1 deny 51.1.0.1 0.6.0.8
This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:36 ART