
I want to filter IP PROTOCOL for 2nd half of a subnetted class C .16 (hosts 24 - 30 )network hosts AS SOURCE ADDRESS to have access to upper half (hosts 128 - 255) of UNSUBNETTED CLASS C DESTINATION NETWORK RANGE.
is it
DENY IP PROTOCOL x.x.x.16 0.0.0.7 (src)x.x.x.0 0.0.0.127(dst wildcard mask)
PERMIT IP PROTOCOL x.x.x.16 0.0.0.13 (src) x.x.x.128 0.0.0.255 (dst wildcard mask)
would this deny host .17 -.23 to access destination hosts 1 - 127 but allow hosts .24 to .30 access to the upper half of unsubnetted lan destination ie. hosts .128 to .255?