named ACL issue

[aacj231210]

Hi all

---R1------R2

Both R1 and R2 run EIGRP. now there is the prefix 172.16.(1~255).0/24,and the summary prefix 172.16.0.0/16 coming into R1,

Here has a problem: they require only can use "PERMIT" and named ACL at R1's interface which links to R2 to deny the prefix 172.16.10.0/24 into the R2.

what shall i do?

thanks advance!

[didyap]

Following links may help you

http://www.cisco.com/en/US/docs/ios/12_4/ip_appl/configuration/guide/hsel_dro.html

http://www.cisco.com/en/US/docs/ios/12_4/ip_appl/configuration/guide/haclflg.html

[Istvan_Rabai]

Hi Matthew,

Could you please explain the task more clearly. I'm a little confused:

The summary prefix 172.16.0.0/16 comes from R2-to-R1.

I believe the task is to deny prefix 172.16.10.0/24 coming from R2-to-R1.

Are there any other conditions?

Can I remove and change the summarization on R2?

Is there a limitation on the number of acl statements on R1?

Cheers:

Istvan