Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.
Course Of The Month
4 days, 9 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
understanding Prefix-List
Posted on 2013-01-05
I am trying to understand he usage of Prefix-List , but it seems like they are abit complex.
for instance:
1***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 ge 24 le 24
is it permitting 1902.168.0.0 all the way 192.168.1.0 ?
2***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 le 32
is it permitting anything that starts with 192.168.X.X all the way 192.18.254.254 ?
3*** what about this, doe s it need "le" or "ge"
0.0.0.0/0
4*** what about these:
0.0.0.0/0 le 32
0.0.0.0/32
Thank you
for instance:
1***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 ge 24 le 24
is it permitting 1902.168.0.0 all the way 192.168.1.0 ?
2***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 le 32
is it permitting anything that starts with 192.168.X.X all the way 192.18.254.254 ?
3*** what about this, doe s it need "le" or "ge"
0.0.0.0/0
4*** what about these:
0.0.0.0/0 le 32
0.0.0.0/32
Thank you
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
5
3
- +1
12 Comments
Active 1 day ago
Check the links below, for good explanations.
https://learningnetwork.cisco.com/servlet/JiveServlet/download/24682-4806/How%20do%20prefix%20list%20work.pdf
http://packetlife.net/blog/2010/feb/1/understanding-ip-prefix-lists/
https://learningnetwork.cisco.com/servlet/JiveServlet/download/24682-4806/How%20do%20prefix%20list%20work.pdf
http://packetlife.net/blog/2010/feb/1/understanding-ip-prefix-lists/
Active today
Can you please check my post above and tell me if I am understanding it the right way or wrong way ?
thanks
thanks
We are dealing with prefixes or subnets only here, do you understand subnets?
1***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 ge 24 le 24
is it permitting 1902.168.0.0 all the way 192.168.1.0 ?
is this case of prefix lists 1*** means match all prefixes within the 192.168.1.0/24 networks a) greater an than or equal to 24 bits and b) less than or equal to 24 bits
Fancy way of stating match 192.168.1.0/24 Remember 192.168.1.0/24 is a subnet, all possible networks that can be subnetted by this parent block is in play, so 192.168.1.0/25, 192.168.1.128/25, and so on, get it?
2***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 le 32
is it permitting anything that starts with 192.168.X.X all the way 192.18.254.254 ?
means match all prefixes within the 192.168.1.0/16 networks less than or equal to 32 bits,
so it means all possible subnets than can be subnetted from 192.168.1.0/16.
3*** what about this, doe s it need "le" or "ge"
0.0.0.0/0
with subnets this is sometimes used to mean all subnets when used with le 32
0.0.0.0/0 is a wildcard.
4*** what about these:
0.0.0.0/0 le 32
0.0.0.0/32
0.0.0.0/32 is an exact match meaning literally network 0.0.0.0 255.255.255.255 you see?
the important point here is that prefix lists deal with parent blocks and possible subnets that can be derived from that parent block.
harbor235 ;}
1***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 ge 24 le 24
is it permitting 1902.168.0.0 all the way 192.168.1.0 ?
is this case of prefix lists 1*** means match all prefixes within the 192.168.1.0/24 networks a) greater an than or equal to 24 bits and b) less than or equal to 24 bits
Fancy way of stating match 192.168.1.0/24 Remember 192.168.1.0/24 is a subnet, all possible networks that can be subnetted by this parent block is in play, so 192.168.1.0/25, 192.168.1.128/25, and so on, get it?
2***what is this saying:
ip prefix-list test seq 12 permit 192.168.1.0/16 le 32
is it permitting anything that starts with 192.168.X.X all the way 192.18.254.254 ?
means match all prefixes within the 192.168.1.0/16 networks less than or equal to 32 bits,
so it means all possible subnets than can be subnetted from 192.168.1.0/16.
3*** what about this, doe s it need "le" or "ge"
0.0.0.0/0
with subnets this is sometimes used to mean all subnets when used with le 32
0.0.0.0/0 is a wildcard.
4*** what about these:
0.0.0.0/0 le 32
0.0.0.0/32
0.0.0.0/32 is an exact match meaning literally network 0.0.0.0 255.255.255.255 you see?
the important point here is that prefix lists deal with parent blocks and possible subnets that can be derived from that parent block.
harbor235 ;}
It is important to note that the prefix-list is use for matching prefixes (routes) and not individual IP addresses.
Active today
sorry I did not get it
ip prefix-list test seq 12 permit 192.168.1.0/16 ge 24 le 24
so /16 is meaningless since it will pass only subnets with 24 bits ?
I see you mention 25 bits .... I did not get get it...
since the condition says greater or equal 24 and less or equal 24...which means to me just 24
ip prefix-list test seq 12 permit 192.168.1.0/16 ge 24 le 24
so /16 is meaningless since it will pass only subnets with 24 bits ?
I see you mention 25 bits .... I did not get get it...
since the condition says greater or equal 24 and less or equal 24...which means to me just 24
The prefix that matches must have the exact subnet mask /24, and the prefix needs to be within 192.168.1.0/16 - which is the same as 192.168.0.0/16.
That would mean all 192.168.x.y/24 .
That would mean all 192.168.x.y/24 .
Active today
I initially understood:
it will take : 192.168.1.0 to 192.168.254.0
Until I saw this, I extracted this from the pdf link given to me above:
ip prefix-list mylist seq 10 permit 172.16.0.0/16 ge 24 le 26
This will take the entire class B network 172.16.0.0 (172.16.0.0/16) and
pass only subnets with a /24, /25 or /26 mask (ge 24 le 26). So the exact
network 172.16.0.0/16 would actually fail the list because it does not have
a mask of /24, /25 or /26.
it will take : 192.168.1.0 to 192.168.254.0
Until I saw this, I extracted this from the pdf link given to me above:
ip prefix-list mylist seq 10 permit 172.16.0.0/16 ge 24 le 26
This will take the entire class B network 172.16.0.0 (172.16.0.0/16) and
pass only subnets with a /24, /25 or /26 mask (ge 24 le 26). So the exact
network 172.16.0.0/16 would actually fail the list because it does not have
a mask of /24, /25 or /26.
Featured Post
![[Webinar] How Hackers Steal Your Credentials](https://filedb.experts-exchange.com/files/public/2017/5/20/3315d9d8-8110-4d52-be94-a5aacdd83e4b.png)
Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
In the hope of saving someone else's sanity...
About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses
Course of the Month4 days, 9 hours left to enroll
689 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.