Yes that does make sense - THANKS - and I wonder why none of the books I
have read about this mention this small but very important fact, that ge
stands for >= and le for = and it just didn't occur to me.  From previous
programming experience a long time ago I should have noticed this, but I
had a brain cloud.

Anyway, this makes this much easier to remember how this works.  Let's
use your last example:

        Example : ip prefix-list elvira permit 172.16.0.0/16 ge 8

This will match any prefix that begins with 172.16 and has a mask
greater than or equal to 255.0.0.0.  Let's modify your example a bit:

          ip prefix-list elvira permit 172.16.0.0/16 le 24

This will match any prefix that begins with 172.16 and has a mask
between 255.255.0.0 and 255.255.255.0, or anything between a /16 and /24
inclusive.  Let's say you wanted to deny prefixes longer than /24:

         ip prefix-list elvira deny 172.16.0.0/16 ge 25

This will match any prefix that begins with 172.16 but has a mask of
/25 or longer.

Does that make sense?  I hope I have that right!  ;-)

Regards,
John

>>> "Ole Drews Jensen"  7/25/01 8:33:13 PM >>>
This is to (hopefully) confirm that my understanding of the examples in
the
BSCN book and the IRA 2nd. ed. book are correct.

If the formel looks like this:

        ip prefix-list elvis permit a.b.c.d/n

It will be compiled like this:

  1)    if neither "ge" nor "le" are added, only the excact prefix (n)
is
allowed.

  2)    if only "ge x" is added, n is ignored and an invinsible le of 32
are
added so 
        prefix x thru 32 are permitted.

  3)    if only "le y" is added, prefix n thru y are permitted.

  4)    if both "ge x" and "le y" are added, n is ignored and prefix x
thru
y are permitted.

This is to all you BGP experts out there - please comment with true or
false
on the 4 statements above, and add any comments or corrections if
necessary.

One last question, can the ge value be lower than the /n value?

        Example : ip prefix-list elvira permit 172.16.0.0/16 ge 8

and would that allow only the prefix 172.16.0.0/8 ?

I thank you in advance,

Ole

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED] 
 http://www.RouterChief.com 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 NEED A JOB ???
 http://www.oledrews.com/job 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13884&t=13828
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to