08-15-2022
09:33 AM
- last edited on
08-17-2022
02:37 AM
by
Translator
Hi there. I would like to get expertise about
IP prefix-list
to define remote VPN users.
Currently, 10.1.2.0/24 is for remote VPN subnet.
OSPF route table has 10.1.2.x/32. Belows are examples for remote VPN routes (/32)
10.1.2.91/32, 10.1.2.103/32, 10.1.2 11/32 etc (Basically, I need to define every /32 route of 10.1.2.x/32 by using
IP prefix-list
How do I define each user's subnet 10.1.2.x/32 with
IP prefix-list?
Eventually I will redistribute OSPF route to BGP along with
IP prefix-list
Thanks!
IP prefix-list remote-vpn seq 10 permit 10.1.2.0/32
(Is this right?)
Solved! Go to Solution.
08-15-2022
11:08 AM
- last edited on
08-17-2022
02:41 AM
by
Translator
Hi @Kyujin Choi ,
If you only want to allow all the /32 prefixes belonging to 10.1.2.0/24, you need the following
prefix-list:
IP prefix-list remote-vpn seq 10 permit 10.1.2.0/24 ge 32
Regards,
08-15-2022 09:37 AM
can you more elaborate?
08-15-2022
09:39 AM
- last edited on
08-17-2022
02:38 AM
by
Translator
IP prefix-list remote-vpn seq 10 permit 10.1.2.0/32
Above IP prefix contains all 10.1.2.x/32 subnet?
08-15-2022
10:20 AM
- last edited on
08-17-2022
02:39 AM
by
Translator
try this
ip prefix-list NAME permit 10.1.2.x/24 le 32
08-15-2022 11:49 AM
@Harold Ritter
his suggestion is better than Me,
I use Le or equal 32 <<- this meaning any prefix that bit 24 must match the prefix and have mask less than or equal 32 (if some how you have 30, not in this VPN router but in other router that make conflict)
he use ge or equal 32 <<- this meaning any prefix that bit 24 must match the prefix and have mask grater than or equal 32, BUT the 32 is greatest number so this will match only 32, and you will not face any issue in OSPF network.
08-15-2022
11:08 AM
- last edited on
08-17-2022
02:41 AM
by
Translator
Hi @Kyujin Choi ,
If you only want to allow all the /32 prefixes belonging to 10.1.2.0/24, you need the following
prefix-list:
IP prefix-list remote-vpn seq 10 permit 10.1.2.0/24 ge 32
Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide