IP prefix list vs ACL

Unicef · Created Sep 12, 2021 16:28:33

Hello friend!

One advantage of IP prefix list over ACL is that routes can be matched against their mask. The following example shows the ip ip-prefix command used to configure an IPv4 prefix list:

ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } ipv4-address mask-length [ greater-equal greater-equal-value ] [ less-equal less-equal-value ]
In this command, ipv4-address mask-length [ greater-equal greater-equal-value ] [ less-equal less-equal-value ] defines the network ID and mask range of routes to be filtered.

https://support.huawei.com/enterprise/en/doc/EDOC1000178171/4d8bdd30/ip-prefix-list

Thanks!

Unicef · Created Sep 12, 2021 16:28:33

Hello friend!

One advantage of IP prefix list over ACL is that routes can be matched against their mask. The following example shows the ip ip-prefix command used to configure an IPv4 prefix list:

ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } ipv4-address mask-length [ greater-equal greater-equal-value ] [ less-equal less-equal-value ]
In this command, ipv4-address mask-length [ greater-equal greater-equal-value ] [ less-equal less-equal-value ] defines the network ID and mask range of routes to be filtered.

https://support.huawei.com/enterprise/en/doc/EDOC1000178171/4d8bdd30/ip-prefix-list

Thanks!

BAZ · Created Sep 12, 2021 17:05:03

One of the biggest disadvantages with access list statements is the fact that the internal router's CPU must process each route update by comparting it against any ACL criteria. If the ACL criteria was lenghty or grew over time, then the CPU could be adversely affected.

Extended access list allow the use of wildcard bit masking to filter network prefixes and their associated masks to provide further filtering capabilities. They can also be used to filter addresses or prefixes based on the prefix length, but you must have a solid understandung of how to use wildcard masks to filter prefixes. Because of their complexity, IP prefix lists are easier to use when filtering prefix ranges.

user_3134129 · Created Sep 12, 2021 18:40:58

IP prefix imposes restrictions on network mask
ACL can't operate with mask, but with address only

IP prefix list vs ACL

Best answer

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

IP prefix list vs ACL

Best answer

Third Party’s Trade Secret

My Followers