From: Tony Olzak (aolzak@xxxxxxxxxxxxxxxxxxx)
Date: Fri Dec 01 2000 - 12:51:16 GMT-3
Oops, that should be a "C", not a "D".
Tony
----- Original Message -----
From: Tony Olzak
To: damien ; ccielab@groupstudy.com
Sent: Thursday, November 30, 2000 9:57 PM
Subject: Re: IPX Masks
This is a network summary mask that works just like a standard IP
subnet mask. You just have to convert to binary to figure it out. The
all "F"s means the equivalent of a /32 mask in IP.
In your last nibble:
0 = 0000
1 = 0001
2 = 0010
3 = 0011
4 = 0100
5 = 0101
In your scenario, since you only want to deny up to network 11110005,
you can only summarize 0-3 in one statement. Otherwise you would
summarize 0-7 in a single statement.
Your statement would be:
access-list 1200 deny 11110000 FFFFFFFD
The "D" stands for "1100", which means you are summarizing networks
0-3.
If you wanted 0-7 you would need to use "1000", or FFFFFFF8 as the IPX
mask.
Tony
----- Original Message -----
From: damien
To: ccielab@groupstudy.com
Sent: Thursday, November 30, 2000 2:37 PM
Subject: IPX Masks
Can anyone explain how IPX Masks work with IPX access lists for NLSP
redistribution and give some examples..............
Just as an example, I had the following range of IPX Networks
11110001....2....3...4 - 9 for example and I wanted to filter the
first 5....other than extering the following 5 lines, is it possible
with a single statement or at least less statements to do the same
job........????
access-lists 1200 deny 11110002 FFFFFFFF
access-lists 1200deny 11110002 FFFFFFFF
access-lists 1200 deny 11110002 FFFFFFFF
access-lists 1200 deny 11110004 FFFFFFFF
access-lists 1200 deny 11110005 FFFFFFFF
Any good sources of info........................
Thanks
Damien
"An expert is a man who has made all the mistakes which can be made,
in a narrow field" - Niels Bohr
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:57 GMT-3