IP prefix-list
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
||||||||||||||||||||||
|
Posted by on October 23, 2006, 5:57 am
Please log in for more thread options An implicit deny all is at the end of every prefix list. Tanks, Sergio | ||||||||||||||||||||||
|
Posted by Walter Roberson on October 23, 2006, 6:07 am
Please log in for more thread options >Is true this issue:
> An implicit deny all is at the end of every prefix list.
That is the case for every kind of Cisco access list that I can think of at the moment. Keep in mind, though, that in a number of situations, a "deny" entry, whether implicit or explicit, does not necessarily mean "block the traffic". Instead, a "deny" entry may just mean "this policy does not apply; try the next policy". Then you encounter the question of what happens if you run out of policies without having matched anything; that varies with context and with what else you have configured. | ||||||||||||||||||||||
|
Posted by on October 26, 2006, 8:06 am
Please log in for more thread options Tank you, now the question is:
what happens if you run out of prefix-list without having matched anything? I have configured a prefix-list whit only one entry: ip prefix-list Example seq 5 deny 1.1.1.0/24 This prefix-list deny all prefix. How can I set the equivalent of access-list 'permit-any' as last entry of that prefix-list? BR Sergio Walter Roberson ha scritto: > >Is true this issue:
>
> > An implicit deny all is at the end of every prefix list.
>
> That is the case for every kind of Cisco access list that I can > think of at the moment. > > Keep in mind, though, that in a number of situations, a > "deny" entry, whether implicit or explicit, does not necessarily > mean "block the traffic". Instead, a "deny" entry may just mean > "this policy does not apply; try the next policy". Then you > encounter the question of what happens if you run out of policies > without having matched anything; that varies with context and > with what else you have configured. | ||||||||||||||||||||||
|
Posted by Lutz Donnerhacke on October 26, 2006, 8:17 am
Please log in for more thread options * sergio.lorusso@gmail.com wrote:
> How can I set the equivalent of access-list 'permit-any' as last entry
> of that prefix-list? ip prefix-list Example seq 999 permit 0.0.0.0 gt 0 | ||||||||||||||||||||||
