|
  
- Thread
- 753
- Credit
- 592
- Money
- 562
- Read Perm.
- 200
- From
- Phnom Penh
- Joined
- 28-2-2009
         
|
To permit only the supernet 10.10.0.0/19, use an extended access list, such as access-list 101 permit ip 10.10.0.0 0.0.0.0 255.255.224.0 0.0.0.0. Refer to access-list (IP extended) for the format of the extended access-list command.
In our example, the source is 10.10.0.0 and the source-wildcard of 0.0.0.0 is configured for an exact match of source. A mask of 255.255.224.0, and a mask-wildcard of 0.0.0.0 is configured for an exact match of source mask. If any one of them (source or mask) does not have a exact match, the access list denies it.
This allows the extended access-list command to permit an exact match of source network number 10.10.0.0 with mask 255.255.224.0 (and thus, 10.10.0.0/19). |
Cisco Network Engineering
Email: khmerccie@gmail.com
CCIE Routing&Switching #26884
CCNA,CCNP,JNCIS-ER,JNCIA-ER |
|