07-02-2018 08:40 AM - edited 03-05-2019 10:42 AM
Hi NEtwork Enginers ,
Kindly help me .. if i change the sequence number ..will it trouble ?
ip prefix-list migrate seq 52 permit 10.206.233.0/24
ip prefix-list migrate seq 53 permit 10.206.233.0/25
mean below will trouble ?
ip prefix-list migrate seq 52 permit 10.206.233.0/25
ip prefix-list migrate seq 53 permit 10.206.233.0/24
I want to understand while configuring prefix list do we need worry about sequence number and where our statement.
Solved! Go to Solution.
07-02-2018 10:38 AM
I don't think the order makes much of a difference. Although one is a subset of the other a match is a match. So if if the /25 has to pass, the permit 10.206.233.0/24 is not a match and it would have to go to the next. Similarly, if the /24 had to pass, the permit 10.206.233.0/25 wouldn't fit the bill.
However if you had "permit 10.206.233.0/24 ge 24 le 25" it should allow the /24 and /25, yet it would also allow 10.206.233.128 /25.
The list is processed sequentially until there is a match, if no match, then the implicit deny all applies.
Hope this helps.
07-03-2018 03:33 AM
Hi Chri
07-02-2018 10:38 AM
I don't think the order makes much of a difference. Although one is a subset of the other a match is a match. So if if the /25 has to pass, the permit 10.206.233.0/24 is not a match and it would have to go to the next. Similarly, if the /24 had to pass, the permit 10.206.233.0/25 wouldn't fit the bill.
However if you had "permit 10.206.233.0/24 ge 24 le 25" it should allow the /24 and /25, yet it would also allow 10.206.233.128 /25.
The list is processed sequentially until there is a match, if no match, then the implicit deny all applies.
Hope this helps.
07-03-2018 03:33 AM
Hi Chri
07-03-2018 03:34 AM
Hi Chri ,
Thank you very much...for your detailed explanation
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: