RE: TWO more questions.

From: Jared Scrivener (jscrivener@ipexpert.com)
Date: Wed Feb 11 2009 - 14:53:16 ARST


Yep, that'll do it, Hobbs.

I was just writing up a rebuttal to your ACL (it looked wrong to me until I
noticed my misinterpretation) when I realized that I should have been
matching 24.24.4.0 TO 24.24.7.0 AND 24.24.12.0 TO 24.24.15.0 rather than
24.24.4.0 AND 24.24.7.0 AND 24.24.12.0 AND 24.24.15.0.

My bad. :)

Cheers,

Jared Scrivener CCIE3 #16983 (R&S, Security, SP), CISSP
Technical Instructor - IPexpert, Inc.
Telephone: +1.810.326.1444
Fax: +1.810.454.0130
Mailto: jscrivener@ipexpert.com

-----Original Message-----
From: Hobbs [mailto:deadheadblues@gmail.com]
Sent: Wednesday, 11 February 2009 11:43 AM
To: Jared Scrivener
Cc: Sidda6; Cisco certification
Subject: Re: TWO more questions.

Hi,

What about this:

0000 0100 4
0000 0101 5
0000 0110 6
0000 0111 7
0000 1100 12
0000 1101 13
0000 1110 14
0000 1111 15

0000 0100 AND = 4
0000 1011 XOR = 11

We have 3 don't care bits and 2^3 = 8 so we should be good. In this
case, 8 is exactly the number we want to match.

24.24.24.4.0 0.0.11.0

On Wed, Feb 11, 2009 at 9:27 AM, Jared Scrivener
<jscrivener@ipexpert.com> wrote:
> Hey Sidda,
>
> For the ACL try this:
>
> Access-list 24 permit ip 24.24.4.0 0.0.8.0 (matches 24.24.4.0 and
> 24.24.12.0)
> Access-list 24 permit ip 24.24.7.0 0.0.8.0 (matches 24.24.7.0 and
> 24.24.15.0)
>
> That's the shortest ACL to match just those 4 network addresses without
over
> matching.
>
> With respect to metrics you can pick anything you like, but I recommend
> picking something that is representative of your underlying network. Going
> into EIGRP I normally use the interface properties of the source interface
> for the routes. For RIP I use a low number that still shows a few hops
(like
> 3) and for OSPF I leave the default (although I prefer Type E1).
>
> Cheers,
>
> Jared Scrivener CCIE3 #16983 (R&S, Security, SP), CISSP
> Technical Instructor - IPexpert, Inc.
> Telephone: +1.810.326.1444
> Fax: +1.810.454.0130
> Mailto: jscrivener@ipexpert.com
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Sidda6
> Sent: Wednesday, 11 February 2009 9:53 AM
> To: Cisco certification
> Subject: TWO more questions.
>
> A)
> I have series of networks from 24.24.1.0 /24 to 24.24.16.0 /24. But
> want to pick only few networks from this series using ACL. For
> example- 24.24.4.0 to 24.24.7.0 AND 24.24.12.0 to 24.24.15.0
>
> What is the Exact ACL for this?
>
> acess-list 24 permit 24.24.0.0 0.0.15.0 ( this picks all networks from
> 24.24.1.0 to 24.24.15.0 ). I don't want all networks, can this be done
> with JUST a ACL alone?
>
> B) If nothing mentioned about metrics, while redistributing from one
> routing protocols to other like from rip/ospf to eigrp and vice versa.
> Does it it mean can I use any mertric number or some exact numbers to
> be used?
>
> Regads,
> Sidda.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:44:10 ARST