Actually, this is not correct. The first prefix list below would filter any prefix whose first three octets are 201.1.5 and has a mask greater than or equal to 29. It would *not* filter 201.1.5.0/24 because the mask is too short. To do what is suggested, it would have to be this:
ip prefix-list greater seq 5 deny 201.1.5.0/24 le 29 Maybe I'm being to nitpicky this morning. I need some more coffee! John >>> "Georg Pauwen" 2/4/02 6:45:24 AM >>> Hi David, here is an example of the le and ge in prefix lists: ip prefix-list greater seq 5 deny 201.1.5.0/24 ge 29 This will deny anything from 201.1.5.0/24 thru 201.1.5.0/29 The advantage of the ge command is that now you need only one entry to allow or deny the entire range. ip prefix-list less seq 10 permit 192.168.5.0/0 le 26 This will allow anything from 192.168.5.0/24 thru 192.168.5.0/26; again, it saves a lot of entries. Hope this helps. Regards, Georg Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34340&t=34312 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]