what is the meaning of "ip host 0.0.0.0" ?
Hello,
last I saw a config of an ISP-router. There was an ACL with the statement "ip host 0.0.0.0 any log".
What meaning has this statemant ?
Regards,
Alexander Czutka
2002-10-5
Re: meaning of "ip host 0.0.0.0" ?
Hello Alexander,
AFAIK, this statement is used for anti-spoofing purposes. According to RFC 3330:
0.0.0.0/8:Addresses in this block refer to source hosts on "this" network. Address 0.0.0.0/32 may be used as a source address for this host on this network; other addresses within 0.0.0.0/8 may be used to refer to specified hosts on this network.
A full access list denying all RFC 3330 special use addresses usually looks like this:
Deny special-use address sources.
!--- Refer to RFC 3330 for additional special use addresses.
access-list 110 deny ip host 0.0.0.0 any
access-list 110 deny ip 127.0.0.0 0.255.255.255 any
access-list 110 deny ip 192.0.2.0 0.0.0.255 any
access-list 110 deny ip 224.0.0.0 31.255.255.255 any
HTH,
Georg
本文解释了 IP 地址 0.0.0.0 在网络配置中的用途,尤其是在 ACL(访问控制列表)中用于反欺骗的目的。详细介绍了此 IP 地址如何用于指定当前网络上的主机,并提供了实际的 ACL 示例。
1176

被折叠的 条评论
为什么被折叠?



