Using prefix-list to deny all traffic from Network blocks
I'm a little confused about prefix lists. Everything I have read over the past few weeks regarding using prefix lists to deny traffic at the edge, suggests that I can use them rather than and ACL for simplicities sake.
For instance, if I were trying to deny the block 220.127.116.11/8 any traffic to our network, I would use:
ip prefix-list TEST deny abc.0.0.0/8 le 32
ip prefix-list TEST premit 0.0.0.0/0 le 32.
This didn't work however. I'm sure I'm missing something stupid. Prefix lists such as this don't have to be applied to a specific interface as an access list would does it?
If this posts answers your question or is helpful, please consider rating it and/or marking as answered.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...