Thursday, February 19, 2009

Auto-RP Access-list filter

To enable rp mapping for special group, you need to configure the send-rp-announce filter first on rp, and the use rp-anounce-filter on rp mapping agent.


1. It is not support fancy acl.
access-list 1 permit 224.0.0.0 8.255.255.255
or
access-list 1 permit 224.0.0.0 1.255.255.255
are same, which will cause the rp announce 224.0.0.0/7 out.
Answer:
8 - 00001000
1 - 00000001
both have 7 bits of 0 so it useing 224.0.0.0/7

You can try 14.255.255.255 and 7.255.255.255.
14 - 00001110
7 - 00000111
and they are same. 224.0.0.0/5


So you should just use all right side 1 ACL, cannot have 0 between 1. Just like network mask.

Reason: In the annoucement and mapping messages, it only carries mask length instead of the whole wide card mask.

No comments: