Thursday, November 4, 2021

Wildcard Mask Sanity Check

Hi all, I'm trying to permit GRE traffic to two IPs:

  • 10.137.1.254
  • 10.138.1.254

I believe this would be a valid ACL entry:

permit gre any 10.137.1.254 0.1.0.0

I believe that mask which is the following in binary means that we don't care about the least significant bit of the second octet (source)

00000000.00000001.00000000.00000000

Can anyone give me a sanity check on this? You don't see this configuration much because most people would just do two ACL entries but I'm super tight on TCAM and have to be very precise in what I allow.

Thanks!



No comments:

Post a Comment