Re: prefix and acl

From: Tony Singh <mothafungla_at_gmail.com>
Date: Tue, 26 Jun 2012 21:13:35 +0100

game set match mcmickle 3 sets to love

--
BR
Tony
Sent from my iPad
On 26 Jun 2012, at 04:11, Jay McMickle <jay.mcmickle_at_yahoo.com> wrote:
> access-list permit ip any john_m
> access-list permit ip john_m any
> route-map discard deny 10
> match ip add john
> route-map discard permit 20
> 
> Where can I apply this thing? (how is that for clarity?)
> 
> Sorry man- you've consumed too much in my route table: time to drop. Drop it or get removed.
> 
> 
> Regards,
> Jay McMickle- CCIE #35355 (R&S)
> Sent from iJay
> 
> On Jun 25, 2012, at 12:01 PM, john matijevic <john.matijevic_at_gmail.com> wrote:
> 
>> Marc,
>> 
>> I will repost original question and please identify in what way I was
>> argumentitive or rude.
>> 
>> {
>> Good Afternoon,
>> 
>> "Can I do this with an acl or extended cal, I have a Brain Freeze
>> Thanks."
>> 
>> What is this?
>> 
>> Very vague, can you please be more specific and describe exactly the
>> issue or problem that you are trying to solve?
>> 
>> Please post network diagram and configurations.
>> }
>> 
>> Please try and be professional we are here to help not to be rude.
>> 
>> 
>> Regards,
>> John
>> 
>> On 6/25/12, Ronnie Angello <ronnie.angello_at_gmail.com> wrote:
>>> Don't mess with Marko!  That's my brother from another mother...
>>> 
>>> http://t.co/ggHcHwFO
>>> 
>>> Sent from my iPhone
>>> 
>>> On Jun 25, 2012, at 11:47 AM, marc abel <marcabel_at_gmail.com> wrote:
>>> 
>>>> Here you are again arguing (and being very rude) to a CCIE again (Marko
>>>> is
>>>> actually a 2X CCIE). The only reason you find the question vague is
>>>> because
>>>> you lack the knowledge to understand the question. Marko was taking the
>>>> time to try to explain it and more detail to you and you act ungrateful
>>>> and
>>>> tell him to think before he responds.
>>>> 
>>>> You should probably consider going to a CCNP study group until you have a
>>>> stronger foundation to discuss these topics, or at the very least learn
>>>> to
>>>> be respectful and admit that it is YOU that needs more explanation and to
>>>> ask for it nicely.
>>>> 
>>>> -Marc Abel
>>>> CCIE #35470
>>>> 
>>>> On Sun, Jun 24, 2012 at 6:50 PM, john matijevic
>>>> <john.matijevic_at_gmail.com>wrote:
>>>> 
>>>>> Marko,
>>>>> 
>>>>> Hasse was very vague with his question, since you understood what his
>>>>> question is I asked you to state it. Then Hasse responded with
>>>>> clarification.
>>>>> Please think before you respond.
>>>>> 
>>>>> Regards
>>>>> John
>>>>> 
>>>>> 
>>>>> On 6/24/12, Marko Milivojevic <markom_at_ipexpert.com> wrote:
>>>>>> He's asking can he filter a specific prefix using an extended access
>>>>>> list, instead of using a prefix list. He gives an example where he
>>>>>> tried with a prefix-list and the example where he tried an acl, with
>>>>>> obviously different results. Someone very quickly pointed out the
>>>>>> difference, with the link to the Cisco's and INE's blog describing the
>>>>>> particular use-case. Case closed, moving on. Don't overthink the
>>>>>> questions.
>>>>>> 
>>>>>> --
>>>>>> Marko Milivojevic - CCIE #18427 (SP R&S)
>>>>>> Senior CCIE Instructor - IPexpert
>>>>>> 
>>>>>> On Sun, Jun 24, 2012 at 3:29 PM, john matijevic
>>>>>> <john.matijevic_at_gmail.com> wrote:
>>>>>>> Good Afternoon Marko,
>>>>>>> 
>>>>>>> Please enlighten us.
>>>>>>> 
>>>>>>> Here is the question:
>>>>>>> 
>>>>>>> Can I do this with an acl or extended cal,
>>>>>>> 
>>>>>>> 
>>>>>>> Please clarify what this is? I don't understand what he is asking?
>>>>>>> 
>>>>>>> Regards,
>>>>>>> John
>>>>>>> On 6/24/12, Marko Milivojevic <markom_at_ipexpert.com> wrote:
>>>>>>>> He did post the config snippets. I think the question was very clear.
>>>>>>>> So were the answers :-)
>>>>>>>> 
>>>>>>>> --
>>>>>>>> Marko Milivojevic - CCIE #18427 (SP R&S)
>>>>>>>> Senior CCIE Instructor - IPexpert
>>>>>>>> 
>>>>>>>> On Sun, Jun 24, 2012 at 12:27 PM, john matijevic
>>>>>>>> <john.matijevic_at_gmail.com> wrote:
>>>>>>>>> Good Afternoon,
>>>>>>>>> 
>>>>>>>>> "Can I do this with an acl or extended cal, I have a Brain Freeze
>>>>>>>>> Thanks."
>>>>>>>>> 
>>>>>>>>> What is this?
>>>>>>>>> 
>>>>>>>>> Very vague, can you please be more specific and describe exactly the
>>>>>>>>> issue or problem that you are trying to solve?
>>>>>>>>> 
>>>>>>>>> Please post network diagram and configurations.
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> Regards,
>>>>>>>>> John
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> On 6/24/12, Sarad <tosara_at_gmail.com> wrote:
>>>>>>>>>> Hi Hasse,
>>>>>>>>>> 
>>>>>>>>>> We can use a extended access-list in BGP to replace a prefix-list,
>>>>> But
>>>>>>>>>> in
>>>>>>>>>> IGP it appears differently as extended accesslist represent the
>>>>>>>>>> route
>>>>>>>>>> source and subnet (not subnet and subnet mask)
>>>>>>>>>> 
>>>>>>>>>> Have a look at this
>>>>>>>>>> 
>>>>> http://blog.internetworkexpert.com/2008/01/04/using-extended-access-lists-in-a-distribute-list/
>>>>>>>>>> 
>>>>>>>>>> Cheers
>>>>>>>>>> Sara
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> On Sun, Jun 24, 2012 at 11:12 PM, <daniel.dib_at_reaper.nu> wrote:
>>>>>>>>>> 
>>>>>>>>>>> Hi Hasse,
>>>>>>>>>>> 
>>>>>>>>>>> You are trying to match every class C address with /24 mask right?
>>>>>>>>>>> This
>>>>>>>>>>> is
>>>>>>>>>>> not possible with a standard ACL. If you used extended ACL you
>>>>>>>>>>> could
>>>>>>>>>>> match
>>>>>>>>>>> mask like this.
>>>>>>>>>>> 
>>>>>>>>>>> access-list 100 permit 192.0.0.0 31.255.255.255 host 255.255.255.0
>>>>>>>>>>> 
>>>>>>>>>>> However I think this is only supported in BGP.
>>>>>>>>>>> 
>>>>>>>>>>> /Daniel
>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> On Sun, 24 Jun 2012 14:02:01 +0200, Hasse wrote:
>>>>>>>>>>> 
>>>>>>>>>>>> Can I do this with an acl or extended cal, I have a Brain Freeze
>>>>>>>>>>>> Thanks.
>>>>>>>>>>>> 
>>>>>>>>>>>> R2#show run | sec rip
>>>>>>>>>>>> router rip
>>>>>>>>>>>> version 2
>>>>>>>>>>>> network 10.0.0.0
>>>>>>>>>>>> distribute-list prefix 1 in FastEthernet0/0
>>>>>>>>>>>> no auto-summary
>>>>>>>>>>>> 
>>>>>>>>>>>> R2#show run | sec prefix-list
>>>>>>>>>>>> ip prefix-list 1 seq 5 permit 192.0.0.0/3 ge 24 le 24
>>>>>>>>>>>> 
>>>>>>>>>>>> R2#show ip route rip
>>>>>>>>>>>> R    223.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> R    200.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> R    192.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> R    195.1.1.0/24 [120/1] via 10.1.12.1, 00:00:19,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> 
>>>>>>>>>>>> if I am using a standard ACL
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> Standard ACL
>>>>>>>>>>>> R2#show run | sec rip
>>>>>>>>>>>> router rip
>>>>>>>>>>>> version 2
>>>>>>>>>>>> network 10.0.0.0
>>>>>>>>>>>> distribute-list 1 in FastEthernet0/0
>>>>>>>>>>>> no auto-summary
>>>>>>>>>>>> 
>>>>>>>>>>>> R2#show run | sec access-list
>>>>>>>>>>>> access-list 1 permit 192.0.0.0 31.255.255.0
>>>>>>>>>>>> 
>>>>>>>>>>>> R2#show ip ro rip
>>>>>>>>>>>> R    223.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> R    200.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>  193.1.1.0/25 is subnetted, 1 subnets
>>>>>>>>>>>> R       193.1.1.0 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> R    192.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> R    195.1.1.0/24 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>>  194.1.1.0/26 is subnetted, 1 subnets
>>>>>>>>>>>> R       194.1.1.0 [120/1] via 10.1.12.1, 00:00:07,
>>>>>>>>>>>> FastEthernet0/0
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> ______________________________**______________________________**
>>>>>>>>>>>> ___________
>>>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>>>> http://www.groupstudy.com/**list/CCIELab.html<
>>>>> http://www.groupstudy.com/list/CCIELab.html>
>>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>>> 
>>>>>>>>>>> ______________________________**______________________________**
>>>>>>>>>>> ___________
>>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>>> http://www.groupstudy.com/**
>>>>>>>>>>> list/CCIELab.html <http://www.groupstudy.com/list/CCIELab.html>
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>>> 
>>>>>>>>>> 
>>>>> _______________________________________________________________________
>>>>>>>>>> Subscription information may be found at:
>>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>> 
>>>>>>>>> 
>>>>> _______________________________________________________________________
>>>>>>>>> Subscription information may be found at:
>>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>> 
>>>>> 
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>> 
>>>>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>> 
>>>> 
>>>> --
>>>> Marc Abel
>>>> CCIE #35470
>>>> (Routing and Switching)
>>>> 
>>>> 
>>>> Blogs and organic groups at http://www.ccie.net
>>>> 
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>> 
>> 
>> Blogs and organic groups at http://www.ccie.net
>> 
>> _______________________________________________________________________
>> Subscription information may be found at: 
>> http://www.groupstudy.com/list/CCIELab.html
> 
> 
> Blogs and organic groups at http://www.ccie.net
> 
> _______________________________________________________________________
> Subscription information may be found at: 
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Tue Jun 26 2012 - 21:13:35 ART

This archive was generated by hypermail 2.2.0 : Sun Jul 01 2012 - 10:39:52 ART