That particular combination is not easy with one WC mask, but here are 2
options. Obviously, the less the lines the better.
Either
Access-list 1 deny 128.252.0.0 0.0.127.255 0-127
Access-list 1 deny 128.252.128.0 0.0.63.255 128-191
Access-list 1 deny 128.252.192.0 0.0.31.255 192-223
Access-list 1 deny 128.252.224.0 0.0.15.255 224-239
Access-list 1 deny 128.252.240.0 0.0.0.255 240
Access-list 1 permit any
Or
Access-list 1 deny 128.252.240.0 0.0.0.255 240
Access-list 1 permit 128.252.240.0 0.0.15.255 240-255 (except the denied
240)
Access-list 1 deny 128.252.0.0 0.0.255.255 0-255 (except the
permitted 241 - 255)
Access-list 1 permit any
-----Original Message-----
From: Farhan Ahmed [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 24, 2001 11:29 AM
To: [EMAIL PROTECTED]
Subject: access list.. [7:13564]
What mask would be used if you want to create an
access list where the IP addresses (128.252.0.0 to
128.252.240.0) would be blocked
pls support with explanation,
Privileged/Confidential Information may be contained in this message or
attachments hereto. Please advise immediately if you or your employer do
not consent to Internet email for messages of this kind. Opinions,
conclusions and other information in this message that do not relate to the
official business of this company shall be understood as neither given nor
endorsed by it.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13570&t=13564
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
