blog
    Using Extended ACLs for B ...
    09 January 08

    Using Extended ACLs for BGP Filtering

    Posted byINE
    facebooktwitterlinkedin
    news-featured

    Prior to the support of prefix-lists in the IOS advanced filtering for BGP needed to be done using extended ACLs.  The syntax for using extended ACLs is shown below:

    access-list <ACL #> permit ip <network> <wildcard mask of network> <subnet mask> <wildcard mask of subnet mask>

    The source portion of the extended ACL is used to match the network portion of the BGP route and the destination portion of the ACL is used to match the subnet mask of the BGP route.  Here are some examples:

    access-list 100 permit ip 10.0.0.0 0.0.0.0 255.255.0.0 0.0.0.0
    Matches 10.0.0.0/16 - Only

    access-list 100 permit ip 10.0.0.0 0.0.0.0 255.255.255.0 0.0.0.0
    Matches 10.0.0.0/24 - Only

    access-list 100 permit ip 10.1.1.0 0.0.0.0 255.255.255.0 0.0.0.0
    Matches 10.1.1.0/24 - Only

    access-list 100 permit ip 10.0.0.0 0.0.255.0 255.255.255.0 0.0.0.0
    Matches 10.0.X.0/24 - Any number in the 3rd octet of the network with a /24 subnet mask.

    access-list 100 permit ip 10.0.0.0 0.255.255.0 255.255.255.0 0.0.0.0
    Matches 10.X.X.0/24 - Any number in the 2nd & 3rd octet of the network with a /24 subnet mask.

    access-list 100 permit ip 10.0.0.0 0.255.255.255 255.255.255.240 0.0.0.0
    Matches 10.X.X.X/28 - Any number in the 2nd, 3rd & 4th octet of the network with a /28 subnet mask.

    access-list 100 permit ip 10.0.0.0 0.255.255.255 255.255.255.0 0.0.0.255
    Matches 10.X.X.X/24 to 10.X.X.X/32 - Any number in the 2nd, 3rd & 4th octet of the network with a /24 to /32 subnet mask.

    access-list 100 permit ip 10.0.0.0 0.255.255.255 255.255.255.128 0.0.0.127
    Matches 10.X.X.X/25 to 10.X.X.X/32 - Any number in the 2nd, 3rd & 4th octet of the network with a /25 to /32 subnet mask

    Hey! Don’t miss anything - subscribe to our newsletter!

    © 2022 INE. All Rights Reserved. All logos, trademarks and registered trademarks are the property of their respective owners.
    instagram Logofacebook Logotwitter Logolinkedin Logoyoutube Logo