Re: prefix and acl

First hit on Bing for CCIE 12.2.44:

http://blog.ine.com/2012/06/10/cisco-live-ccie-routing-and-switching-techtori
al/

Mind you, that information is on a training company website, not Cisco's. It
is a quote from a session a Cisco Live this year. Marko probably went to that
one too.

Will you trust that? Up to you, but I personally won't be worrying about VTPv3
appearing on the exam in the near future.

On 26/06/2012, at 5:40 AM, john matijevic wrote:

> Marc,
>
> Where is link that tells exactly which version the lab switches are
running?
> "Lab switches run 12.2(44)SE"
>
> Regards,
> John
>
>
>
>
>
> On 6/25/12, marc abel <marcabel_at_gmail.com> wrote:
>> I sent the proof in the VTP thread but I will put it here too. Marko is
>> correct that VTP version 3 can not be currently tested in the lab because
>> it is not available on the version of IOS running on the Catalyst 3560
>> switches in the lab.
>>
>> Lab switches run 12.2(44)SE
>>
>> 12.2(52)SE and later support VTP version 3
>>
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12
.2_52_se/configuration/guide/swvtp.html
>>
>>
>> On Mon, Jun 25, 2012 at 12:31 PM, john matijevic
>> <john.matijevic_at_gmail.com>wrote:
>>
>>> Marko,
>>>
>>> You did not clarify, Don clarified the question.
>>> VTP3 can be tested on the lab from the Cisco documentation website
>>> that I provided links to on other post.
>>> I go from what Cisco says and what is documented. I have yet to see
>>> where you get the information to suggest that Version 3 cannot be
>>> asked.
>>> "
>>>> I will repeat once again that VTPv3 is not supported on the release of
>>>> the software in the lab. It's up to you to either accept or not accept
>>>> that.
>>> "
>>>
>>> Where is this documented?
>>>
>>> Again, you should and i'll repeat again think before you speak, and
>>> addiitonally please try and be professional.
>>>
>>> Until you can prove me wrong I have to go with what is documented on
>>> Cisco's website as to the topics and software images on the Lab.
>>>
>>> Regards,
>>> John
>>>
>>>
>>> On 6/25/12, Marko Milivojevic <markom_at_ipexpert.com> wrote:
>>>> Yeah, the question was can the ACL be used instead of a prefix-list to
>>>> accomplish the same result. We clarified that and that question was
>>>> answered...
>>>>
>>>> I will repeat once again that VTPv3 is not supported on the release of
>>>> the software in the lab. It's up to you to either accept or not accept
>>>> that.
>>>>
>>>> Personally, I've had just about enough of arguing with you. Please,
>>>> bother someone else. Or even better... spend time learning something
>>>> so you can pass CCIE again.
>>>>
>>>> --
>>>> Marko Milivojevic - CCIE #18427 (SP R&S)
>>>> Senior CCIE Instructor - IPexpert
>>>>
>>>>
>>>> On Mon, Jun 25, 2012 at 1:20 PM, john matijevic
>>>> <john.matijevic_at_gmail.com> wrote:
>>>>> Marko,
>>>>>
>>>>> I disagree with you the question was very vague, you said you
>>>>> understood I asked you to clarify and you could not, finally, Don
>>>>> explained to me what his original intent was. But you answer that you
>>>>> understood his requirements, and I asked you state what he was asking
>>>>> and you could not provide.
>>>>>
>>>>> I prove you wrong again in other post VTP version 3 can be on exam,
>>>>> you said its not on exam, I asked you to provide reference you could
>>>>> not.
>>>>>
>>>>> Here is original question:
>>>>> Can I do this with an acl or extended cal, I have a Brain Freeze
>>>>> Thanks.
>>>>>
>>>>> R2#show run | sec rip
>>>>> router rip
>>>>> version 2
>>>>> network 10.0.0.0
>>>>> distribute-list prefix 1 in FastEthernet0/0
>>>>> no auto-summary
>>>>>
>>>>> R2#show run | sec prefix-list
>>>>> ip prefix-list 1 seq 5 permit 192.0.0.0/3 ge 24 le 24
>>>>>
>>>>> R2#show ip route rip
>>>>> R 223.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19, FastEthernet0/0
>>>>> R 200.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19, FastEthernet0/0
>>>>> R 192.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19, FastEthernet0/0
>>>>> R 195.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19, FastEthernet0/0
>>>>>
>>>>> if I am using a standard ACL
>>>>>
>>>>>
>>>>> Standard ACL
>>>>> R2#show run | sec rip
>>>>> router rip
>>>>> version 2
>>>>> network 10.0.0.0
>>>>> distribute-list 1 in FastEthernet0/0
>>>>> no auto-summary
>>>>>
>>>>> R2#show run | sec access-list
>>>>> access-list 1 permit 192.0.0.0 31.255.255.0
>>>>>
>>>>> R2#show ip ro rip
>>>>> R 223.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07, FastEthernet0/0
>>>>> R 200.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07, FastEthernet0/0
>>>>> 193.1.1.0/25 is subnetted, 1 subnets
>>>>> R 193.1.1.0 [120/1] via 10.1.12.1, 00:00:07, FastEthernet0/0
>>>>> R 192.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07, FastEthernet0/0
>>>>> R 195.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07, FastEthernet0/0
>>>>> 194.1.1.0/26 is subnetted, 1 subnets
>>>>> R 194.1.1.0 [120/1] via 10.1.12.1, 00:00:07, FastEthernet0/0
>>>>>
>>>>>
>>>>> Please try to be nice and friendly im here to help the team.
>>>>>
>>>>> Regards,
>>>>> John
>>>>>
>>>>> On 6/25/12, Marko Milivojevic <markom_at_ipexpert.com> wrote:
>>>>>> Below original question was output from various commands you didn't
>>>>>> bother to look at.
>>>>>>
>>>>>> --
>>>>>> Marko Milivojevic - CCIE #18427 (SP R&S)
>>>>>> Senior CCIE Instructor - IPexpert
>>>>>>
>>>>>> On Mon, Jun 25, 2012 at 1:01 PM, john matijevic
>>>>>> <john.matijevic_at_gmail.com> wrote:
>>>>>>> Marc,
>>>>>>>
>>>>>>> I will repost original question and please identify in what way I
>>>>>>> was
>>>>>>> argumentitive or rude.
>>>>>>>
>>>>>>> {
>>>>>>> Good Afternoon,
>>>>>>>
>>>>>>> "Can I do this with an acl or extended cal, I have a Brain Freeze
>>>>>>> Thanks."
>>>>>>>
>>>>>>> What is this?
>>>>>>>
>>>>>>> Very vague, can you please be more specific and describe exactly the
>>>>>>> issue or problem that you are trying to solve?
>>>>>>>
>>>>>>> Please post network diagram and configurations.
>>>>>>> }
>>>>>>>
>>>>>>> Please try and be professional we are here to help not to be rude.
>>>>>>>
>>>>>>>
>>>>>>> Regards,
>>>>>>> John
>>>>>>>
>>>>>>> On 6/25/12, Ronnie Angello <ronnie.angello_at_gmail.com> wrote:
>>>>>>>> Don't mess with Marko! That's my brother from another mother...
>>>>>>>>
>>>>>>>> http://t.co/ggHcHwFO
>>>>>>>>
>>>>>>>> Sent from my iPhone
>>>>>>>>
>>>>>>>> On Jun 25, 2012, at 11:47 AM, marc abel <marcabel_at_gmail.com> wrote:
>>>>>>>>
>>>>>>>>> Here you are again arguing (and being very rude) to a CCIE again
>>>>>>>>> (Marko
>>>>>>>>> is
>>>>>>>>> actually a 2X CCIE). The only reason you find the question vague
>>>>>>>>> is
>>>>>>>>> because
>>>>>>>>> you lack the knowledge to understand the question. Marko was
>>>>>>>>> taking
>>>>>>>>> the
>>>>>>>>> time to try to explain it and more detail to you and you act
>>>>>>>>> ungrateful
>>>>>>>>> and
>>>>>>>>> tell him to think before he responds.
>>>>>>>>>
>>>>>>>>> You should probably consider going to a CCNP study group until you
>>>>>>>>> have
>>>>>>>>> a
>>>>>>>>> stronger foundation to discuss these topics, or at the very least
>>>>>>>>> learn
>>>>>>>>> to
>>>>>>>>> be respectful and admit that it is YOU that needs more explanation
>>>>>>>>> and
>>>>>>>>> to
>>>>>>>>> ask for it nicely.
>>>>>>>>>
>>>>>>>>> -Marc Abel
>>>>>>>>> CCIE #35470
>>>>>>>>>
>>>>>>>>> On Sun, Jun 24, 2012 at 6:50 PM, john matijevic
>>>>>>>>> <john.matijevic_at_gmail.com>wrote:
>>>>>>>>>
>>>>>>>>>> Marko,
>>>>>>>>>>
>>>>>>>>>> Hasse was very vague with his question, since you understood what
>>>>>>>>>> his
>>>>>>>>>> question is I asked you to state it. Then Hasse responded with
>>>>>>>>>> clarification.
>>>>>>>>>> Please think before you respond.
>>>>>>>>>>
>>>>>>>>>> Regards
>>>>>>>>>> John
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> On 6/24/12, Marko Milivojevic <markom_at_ipexpert.com> wrote:
>>>>>>>>>>> He's asking can he filter a specific prefix using an extended
>>>>>>>>>>> access
>>>>>>>>>>> list, instead of using a prefix list. He gives an example where
>>>>>>>>>>> he
>>>>>>>>>>> tried with a prefix-list and the example where he tried an acl,
>>>>>>>>>>> with
>>>>>>>>>>> obviously different results. Someone very quickly pointed out
>>>>>>>>>>> the
>>>>>>>>>>> difference, with the link to the Cisco's and INE's blog
>>>>>>>>>>> describing
>>>>>>>>>>> the
>>>>>>>>>>> particular use-case. Case closed, moving on. Don't overthink the
>>>>>>>>>>> questions.
>>>>>>>>>>>
>>>>>>>>>>> --
>>>>>>>>>>> Marko Milivojevic - CCIE #18427 (SP R&S)
>>>>>>>>>>> Senior CCIE Instructor - IPexpert
>>>>>>>>>>>
>>>>>>>>>>> On Sun, Jun 24, 2012 at 3:29 PM, john matijevic
>>>>>>>>>>> <john.matijevic_at_gmail.com> wrote:
>>>>>>>>>>>> Good Afternoon Marko,
>>>>>>>>>>>>
>>>>>>>>>>>> Please enlighten us.
>>>>>>>>>>>>
>>>>>>>>>>>> Here is the question:
>>>>>>>>>>>>
>>>>>>>>>>>> Can I do this with an acl or extended cal,
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> Please clarify what this is? I don't understand what he is
>>> asking?
>>>>>>>>>>>>
>>>>>>>>>>>> Regards,
>>>>>>>>>>>> John
>>>>>>>>>>>> On 6/24/12, Marko Milivojevic <markom_at_ipexpert.com> wrote:
>>>>>>>>>>>>> He did post the config snippets. I think the question was very
>>>>>>>>>>>>> clear.
>>>>>>>>>>>>> So were the answers :-)
>>>>>>>>>>>>>
>>>>>>>>>>>>> --
>>>>>>>>>>>>> Marko Milivojevic - CCIE #18427 (SP R&S)
>>>>>>>>>>>>> Senior CCIE Instructor - IPexpert
>>>>>>>>>>>>>
>>>>>>>>>>>>> On Sun, Jun 24, 2012 at 12:27 PM, john matijevic
>>>>>>>>>>>>> <john.matijevic_at_gmail.com> wrote:
>>>>>>>>>>>>>> Good Afternoon,
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> "Can I do this with an acl or extended cal, I have a Brain
>>>>>>>>>>>>>> Freeze
>>>>>>>>>>>>>> Thanks."
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> What is this?
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Very vague, can you please be more specific and describe
>>> exactly
>>>>>>>>>>>>>> the
>>>>>>>>>>>>>> issue or problem that you are trying to solve?
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Please post network diagram and configurations.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Regards,
>>>>>>>>>>>>>> John
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> On 6/24/12, Sarad <tosara_at_gmail.com> wrote:
>>>>>>>>>>>>>>> Hi Hasse,
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> We can use a extended access-list in BGP to replace a
>>>>>>>>>>>>>>> prefix-list,
>>>>>>>>>> But
>>>>>>>>>>>>>>> in
>>>>>>>>>>>>>>> IGP it appears differently as extended accesslist represent
>>> the
>>>>>>>>>>>>>>> route
>>>>>>>>>>>>>>> source and subnet (not subnet and subnet mask)
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Have a look at this
>>>>>>>>>>>>>>>
>>>>>>>>>>
>>>
http://blog.internetworkexpert.com/2008/01/04/using-extended-access-lists-in-
a-distribute-list/
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Cheers
>>>>>>>>>>>>>>> Sara
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> On Sun, Jun 24, 2012 at 11:12 PM, <daniel.dib_at_reaper.nu>
>>> wrote:
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Hi Hasse,
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> You are trying to match every class C address with /24 mask
>>>>>>>>>>>>>>>> right?
>>>>>>>>>>>>>>>> This
>>>>>>>>>>>>>>>> is
>>>>>>>>>>>>>>>> not possible with a standard ACL. If you used extended ACL
>>> you
>>>>>>>>>>>>>>>> could
>>>>>>>>>>>>>>>> match
>>>>>>>>>>>>>>>> mask like this.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> access-list 100 permit 192.0.0.0 31.255.255.255 host
>>>>>>>>>>>>>>>> 255.255.255.0
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> However I think this is only supported in BGP.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> /Daniel
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On Sun, 24 Jun 2012 14:02:01 +0200, Hasse wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Can I do this with an acl or extended cal, I have a Brain
>>>>>>>>>>>>>>>>> Freeze
>>>>>>>>>>>>>>>>> Thanks.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> R2#show run | sec rip
>>>>>>>>>>>>>>>>> router rip
>>>>>>>>>>>>>>>>> version 2
>>>>>>>>>>>>>>>>> network 10.0.0.0
>>>>>>>>>>>>>>>>> distribute-list prefix 1 in FastEthernet0/0
>>>>>>>>>>>>>>>>> no auto-summary
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> R2#show run | sec prefix-list
>>>>>>>>>>>>>>>>> ip prefix-list 1 seq 5 permit 192.0.0.0/3 ge 24 le 24
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> R2#show ip route rip
>>>>>>>>>>>>>>>>> R 223.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> R 200.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> R 192.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> R 195.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> if I am using a standard ACL
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Standard ACL
>>>>>>>>>>>>>>>>> R2#show run | sec rip
>>>>>>>>>>>>>>>>> router rip
>>>>>>>>>>>>>>>>> version 2
>>>>>>>>>>>>>>>>> network 10.0.0.0
>>>>>>>>>>>>>>>>> distribute-list 1 in FastEthernet0/0
>>>>>>>>>>>>>>>>> no auto-summary
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> R2#show run | sec access-list
>>>>>>>>>>>>>>>>> access-list 1 permit 192.0.0.0 31.255.255.0
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> R2#show ip ro rip
>>>>>>>>>>>>>>>>> R 223.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> R 200.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> 193.1.1.0/25 is subnetted, 1 subnets
>>>>>>>>>>>>>>>>> R 193.1.1.0 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> R 192.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> R 195.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>> 194.1.1.0/26 is subnetted, 1 subnets
>>>>>>>>>>>>>>>>> R 194.1.1.0 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>> ______________________________**______________________________**
>>>>>>>>>>>>>>>>> ___________
>>>>>>>>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>>>>>>>>> http://www.groupstudy.com/**list/CCIELab.html<
>>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>> ______________________________**______________________________**
>>>>>>>>>>>>>>>> ___________
>>>>>>>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>>>>>>>> http://www.groupstudy.com/**
>>>>>>>>>>>>>>>> list/CCIELab.html
>>>>>>>>>>>>>>>> <http://www.groupstudy.com/list/CCIELab.html>
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>
>>>>>>>>>>
>>> _______________________________________________________________________
>>>>>>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>
>>> _______________________________________________________________________
>>>>>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>
>>>>>>>>>>
>>> _______________________________________________________________________
>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> Marc Abel
>>>>>>>>> CCIE #35470
>>>>>>>>> (Routing and Switching)
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>
>>>>>>>>>
>>> _______________________________________________________________________
>>>>>>>>> Subscription information may be found at:
>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>
>>>>
>>>
>>
>>
>>
>> --
>> Marc Abel
>> CCIE #35470
>> (Routing and Switching)
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Jun 26 2012 - 10:28:41 ART