Merge remote-tracking branch 'netravnen/chapter/internet' into develop

This commit is contained in:
chhan11 2017-06-01 19:49:50 +02:00
commit 5b49b43092
4 changed files with 60 additions and 0 deletions

View File

@ -12,6 +12,7 @@
- [ ] OSPF
- [ ] RIP
- [ ] PREFIX FILTERS
- [X] Example code
- [ ] ASN's
## _Mostly_ done

3
chapter/ipaddressing.tex Normal file
View File

@ -0,0 +1,3 @@
\chapter{IP Addressing}
\lstinputlisting[language=plaintxt]{code/ipaddressblocks.txt}

35
code/ipaddressblocks.txt Normal file
View File

@ -0,0 +1,35 @@
Address Block Present Use Reference
--------------------------------------------------------------------
0.0.0.0/8 "This" Network RFC 1122, Section 3.2.1.3
10.0.0.0/8 Private-Use Networks RFC 1918
14.0.0.0/8 Public-Data Networks RFC 1700, page 181
100.64.0.0/10 Shared Address Space RFC 6598
127.0.0.0/8 Loopback RFC 1122, Section 3.2.1.3
169.254.0.0/16 Link Local RFC 3927
172.16.0.0/12 Private-Use Networks RFC 1918
192.0.0.0/24 IETF Protocol Assignments RFC 6890, Section 2.1
192.0.0.0/29 [1] DS-Lite RFC 6333
192.0.2.0/24 TEST-NET-1 RFC 5737
192.88.99.0/24 6to4 Relay Anycast RFC 3068
192.168.0.0/16 Private-Use Networks RFC 1918
198.18.0.0/15 Network Interconnect
Device Benchmark Testing RFC 2544
198.51.100.0/24 TEST-NET-2 RFC 5737
203.0.113.0/24 TEST-NET-3 RFC 5737
224.0.0.0/4 Multicast RFC 3171
240.0.0.0/4 Reserved for Future Use RFC 1112, Section 4
255.255.255.255/32 Limited Broadcast RFC 0919, Section 7
RFC 0922, Section 7
::1/128 Loopback Address RFC 4291
::/128 Unspecified Address RFC 4291
64:ff9b::/96 IPv4-IPv6 Translat. RFC 6052
::ffff:0:0/96 IPv4-mapped Address RFC 4291
100::/64 Discard-Only Address Block RFC 6666
2001::/23 IETF Protocol Assignments RFC 2928
2001::/32 TEREDO RFC 4380
2001:2::/48 Benchmarking RFC 5180
2001:db8::/32 Documentation RFC 3849
2001:10::/28 ORCHID RFC 4843
2002::/16 [2] 6to4 RFC 3056
fc00::/7 Unique-Local RFC 4193
fe80::/10 Linked-Scoped Unicast RFC 4291

View File

@ -0,0 +1,21 @@
ip prefix-list permit-lans permit 10.0.0.0/8 ge 24 ! Allow prefixes >=/24
ip prefix-list permit-lans permit 172.16.0.0/12 ge 24 ! Allow prefixes >=/24
ip prefix-list permit-lans permit 192.168.0.0/16 ge 24 ! Allow prefixes >=/24
ip prefix-list permit-lans deny 0.0.0.0/0 le 32 ! Deny everthing else
ip prefix-list deny-bogons deny 0.0.0.0/8 le 32 ! Block default route
ip prefix-list deny-bogons deny 10.0.0.0/8 le 32
ip prefix-list deny-bogons deny 100.64.0.0/10 le 32
ip prefix-list deny-bogons deny 127.0.0.0/8 le 32
ip prefix-list deny-bogons deny 169.254.0.0/16 le 32
ip prefix-list deny-bogons deny 172.16.0.0/12 le 32
ip prefix-list deny-bogons deny 192.0.0.0/24 le 32
ip prefix-list deny-bogons deny 192.0.2.0/24 le 32
ip prefix-list deny-bogons deny 192.168.0.0/16 le 32
ip prefix-list deny-bogons deny 198.18.0.0/15 le 32
ip prefix-list deny-bogons deny 198.51.100.0/24 le 32
ip prefix-list deny-bogons deny 203.0.113.0/24 le 32
ip prefix-list deny-bogons deny 224.0.0.0/4 le 32
ip prefix-list deny-bogons deny 240.0.0.0/4 le 32
ip prefix-list deny-bogons deny 0.0.0.0/0 ge 25 ! Block prefixes >/24
ip prefix-list deny-bogons permit 0.0.0.0/0 le 24 ! Permit prefixes <=/24