Hi, Try the following:
IP access-list standard allowed Permit 10.10.10.40 0.0.0.7 Permit 10.10.10.49 0.0.0.0 The first permit statement allow addresses n.n.n.40 to n.n.n.48, while the last one allow address n.n.n.49. There is no way you can deny whole range without affecting other addresses with one single statement. When appliying it to your interface say: Router(config-if)#IP access-group allowed in Regards. Oletu ----- Original Message ----- From: Hunt Lee To: Sent: Friday, January 04, 2002 9:29 PM Subject: Access-List questions [7:31001] > Hello there, > > I need some help on Access-Lists: > > Say if I want to permit network access to only 10.10.10.1 - 10.10.10.254 > > I know you can simply use: > > Access-list 10 permit 10.10.10.0 0.0.0.255 > > However, if I want to only permit the range of 10.10.10.40 to 10.10.10.49 > (inclusive), then what should I do? > > Any help is greatly appreciated. > > Best Regards, > Hunt Lee > IP Solution Analyst > Cable & Wireless _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31006&t=31001 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]