cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1406
Views
0
Helpful
3
Replies

host 255.255.255.0

alsayed
Level 1
Level 1

Dear Netpro!

R1#sh ip access-lists

Extended IP access list RIP-OSPF

10 permit ip 199.172.0.0 0.0.255.255 255.255.255.0 0.0.0.255

20 permit ip host 150.100.1.0 host 255.255.255.0

30 permit ip host 150.1.1.0 host 255.255.255.0

question:what this mean ?host 255.255.255.0

many 10xs

1 Accepted Solution

Accepted Solutions

Edison Ortiz
Hall of Fame
Hall of Fame

Ali,

That's not a valid host, that should've been part of the subnet mask.

It looks like that ACL is for redistribution and you want to redistribute 199.172.0.0/16, 150.100.1.0/24 and 150.1.1.0/24.

Your ACL you should like this

Standard IP access list RIP-OSPF

10 permit 199.172.0.0, wildcard bits 0.0.255.255

20 permit 150.100.1.0, wildcard bits 0.0.0.255

30 permit 150.1.1.0, wildcard bits 0.0.0.255

___

sh run | sec RIP-OSPF

ip access-list standard RIP-OSPF

permit 199.172.0.0 0.0.255.255

permit 150.100.1.0 0.0.0.255

permit 150.1.1.0 0.0.0.255

__

Remember, with ACLs you must use the inverse mask and use standard instead of extended

HTH,

__

Edison.

View solution in original post

3 Replies 3

Edison Ortiz
Hall of Fame
Hall of Fame

Ali,

That's not a valid host, that should've been part of the subnet mask.

It looks like that ACL is for redistribution and you want to redistribute 199.172.0.0/16, 150.100.1.0/24 and 150.1.1.0/24.

Your ACL you should like this

Standard IP access list RIP-OSPF

10 permit 199.172.0.0, wildcard bits 0.0.255.255

20 permit 150.100.1.0, wildcard bits 0.0.0.255

30 permit 150.1.1.0, wildcard bits 0.0.0.255

___

sh run | sec RIP-OSPF

ip access-list standard RIP-OSPF

permit 199.172.0.0 0.0.255.255

permit 150.100.1.0 0.0.0.255

permit 150.1.1.0 0.0.0.255

__

Remember, with ACLs you must use the inverse mask and use standard instead of extended

HTH,

__

Edison.

10xs edison much appreciated

martin-johnson
Level 1
Level 1

On the other hand - those could be valid access lists. Access lists of that format can be used to filter BGP routes.

The source portion of the ACL is used to match the network portion of the BGP route and the destination portion of the ACL is used to match the subnet mask of the BGP route.

http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a00801310cb.shtml

Filtering Using distribute-list with an Extended Access List

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: