Craig, The problem as I see it is you need to allow 50 hosts, to pass through an ACL but the 50 hosts you want to pass are difficult to "mask out" with a simple ACL.
The previous answers provided might be correct but are a little more than I believe you are looking for. You are not trying to filter on source AND destination address and do not need to filter by protocol, just source, so I recomend a standard access-list, like I have listed below. There are several ways to "slice it up" here is just one. access-list 10 deny host 192.100.34.97 access-list 10 deny host 192.100.34.98 access-list 10 deny host 192.100.34.99 access-list 10 deny host 192.100.34.151 access-list 10 deny host 192.100.34.152 access-list 10 deny 192.100.34.153 0.0.0.7 access-list 10 permit 192.100.34.97 0.0.0.31 access-list 10 permit host 192.100.34.127 access-list 10 permit host 192.100.34.128 access-list 10 permit 192.100.34.129 0.0.0.31 If it's an option, you might want to consider re-addressing to better align your host addresses with a subnet boundary. For example, 192.100.34.65 0.0.0.63 covers hosts 65-126 (62 hosts) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=71791&t=71696 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]