IP prefix-list

Oct 23, 2006 3 Replies

Is true this issue:



An implicit deny all is at the end of every prefix list.



Tanks, Sergio



That is the case for every kind of Cisco access list that I can think of at the moment.

Keep in mind, though, that in a number of situations, a "deny" entry, whether implicit or explicit, does not necessarily mean "block the traffic". Instead, a "deny" entry may just mean "this policy does not apply; try the next policy". Then you encounter the question of what happens if you run out of policies without having matched anything; that varies with context and with what else you have configured.

Tank you, now the question is: what happens if you run out of prefix-list without having matched anything?

I have configured a prefix-list whit only one entry:

ip prefix-list Example seq 5 deny 1.1.1.0/24

This prefix-list deny all prefix.

How can I set the equivalent of access-list 'permit-any' as last entry of that prefix-list?

BR Sergio

Walter Roberson ha scritto:

ip prefix-list Example seq 999 permit 0.0.0.0 gt 0

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required