Create an Access list to block the source address range 128.252.0.0 to
128.252.240.0
Solution 1:
access-list 1 deny 128.252.0.0 0.0.127.255 Blocks 128.252.0-127.0-255
access-list 1 deny 128.252.128.0 0.0.63.255 Blocks 128.252.128-191.0-255
access-list 1 deny 128.252.192.0 0.0.31.255 Blocks 128.252.192-223.0-255
access-list 1 deny 128.252.224.0 0.0.15.255 Blocks 128.252.224-239.0-255
access-list 1 permit any Allows all other traffic to
pass.
Solution 2:
access-list 1 permit 128.252.240.0 0.0.15.255 Permits 128.252.240-255.0-255
access-list 1 deny 128.252.0.0 0.0.255.255 Denies traffic from 128.252 that
is not permitted by the previous line
access-list 1 permit any
Notes:
Both Solutions work, but solution 2 has less lines and will result in less
processor utilization in most scenarios.
-Ejay
-----Original Message-----
From: Farhan Ahmed [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 24, 2001 2:29 PM
To: [EMAIL PROTECTED]
Subject: access list.. [7:13564]
What mask would be used if you want to create an
access list where the IP addresses (128.252.0.0 to
128.252.240.0) would be blocked
pls support with explanation,
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13784&t=13564
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
