cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1132
Views
25
Helpful
5
Replies

IP prefix-list for /32 subnet (remote VPN usr)

Kyujin Choi
Level 1
Level 1

 

 Hi there. I would like to get expertise about

IP prefix-list

to define remote VPN users. 

 Currently, 10.1.2.0/24 is for remote VPN subnet. 

 OSPF route table has 10.1.2.x/32. Belows are examples for remote VPN routes (/32)

 10.1.2.91/32, 10.1.2.103/32, 10.1.2 11/32 etc (Basically, I need to define every /32 route of 10.1.2.x/32 by using

IP prefix-list

  How do I define each user's subnet 10.1.2.x/32 with

IP prefix-list?

Eventually I will redistribute OSPF route to BGP along with

 IP prefix-list

Thanks!

 

 IP prefix-list remote-vpn seq 10 permit 10.1.2.0/32   

(Is this right?)

 

 

1 Accepted Solution

Accepted Solutions

Hi @Kyujin Choi ,

If you only want to allow all the /32 prefixes belonging to 10.1.2.0/24, you need the following

prefix-list:

 

IP prefix-list remote-vpn seq 10 permit 10.1.2.0/24 ge 32

Regards,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

View solution in original post

5 Replies 5

can you more elaborate?

IP prefix-list remote-vpn seq 10 permit 10.1.2.0/32   

 

Above IP prefix contains all 10.1.2.x/32 subnet? 

try this 


ip prefix-list NAME permit 10.1.2.x/24 le 32

@Harold Ritter
his suggestion is better than Me,
I use Le or equal 32 <<- this meaning any prefix that bit 24 must match the prefix and have mask less than or equal 32 (if some how you have 30, not in this VPN router but in other router that make conflict)
he use ge or equal 32  <<- this meaning any prefix that bit 24 must match the prefix and have mask grater than or equal 32, BUT the 32 is greatest number so this will match only 32, and you will not face any issue in OSPF network. 

Hi @Kyujin Choi ,

If you only want to allow all the /32 prefixes belonging to 10.1.2.0/24, you need the following

prefix-list:

 

IP prefix-list remote-vpn seq 10 permit 10.1.2.0/24 ge 32

Regards,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México
Review Cisco Networking for a $25 gift card