I need to deny 2 consecutive network ranges. I'd like to combine these into
one statement. Here's my example, am I correct?
Example IPs: 100.16.0.0 and 100.17.0.0
I want to block on the .16 & .17 space:
access-list 103 deny ip 100.16.0.0 0.238.255.255 any
Thanks,
Rob Montgomery
I'd say summarisation of these two addresses with wildcard is:
100.16.0.0 0.1.255.255
I've been trying to backward engineer the 238 you've got, but not too sure
where it came from.
Normal mask would be 255.254.0.0 so wildcard should be inverse (take all
octets from 255)
Been a long day. I'll ve
use this -
access-list 103 deny ip 100.16.0.0 0.1.255.255
An easy way to look at it is that if your address ranges are consecutive
then the .16 above is the starting address and .1 is the number of networks.
So it blocks 16-17.
Or look at bits -
.16 = 0001
.17 = 00010001
in the mask 0
Deny Statement & Wildcard
use this -
access-list 103 deny ip 100.16.0.0 0.1.255.255
An easy way to look at it is that if your address ranges are consecutive
then the .16 above is the starting address and .1 is the number of networks.
So it blocks 16-17.
Or look at bits -
.16 = 0001
;-)
Don't worry about how I got it - it wasn't pretty. OR right.
-Original Message-
From: Gareth Hinton [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 15, 2000 10:46 AM
To: [EMAIL PROTECTED]
Subject: Re: ACL Deny Statement & Wildcard
I'd say summarisation of
: [EMAIL PROTECTED]
Subject: ACL Deny Statement & Wildcard
I need to deny 2 consecutive network ranges. I'd like to combine these into
one statement. Here's my example, am I correct?
Example IPs: 100.16.0.0 and 100.17.0.0
I want to block on the .16 & .17 space:
acces
6 matches
Mail list logo
