ACL FILTER UNSUBNETTED CLASS C DESTINATION ADDRESS

angexxxangexxx Member Posts: 2 ■□□□□□□□□□
icon_rolleyes.gif

I want to filter IP PROTOCOL for 2nd half of a subnetted class C .16 (hosts 24 - 30 )network hosts AS SOURCE ADDRESS to have access to upper half (hosts 128 - 255) of UNSUBNETTED CLASS C DESTINATION NETWORK RANGE.

is it
DENY IP PROTOCOL x.x.x.16 0.0.0.7 (src)x.x.x.0 0.0.0.127(dst wildcard mask)
PERMIT IP PROTOCOL x.x.x.16 0.0.0.13 (src) x.x.x.128 0.0.0.255 (dst wildcard mask)

would this deny host .17 -.23 to access destination hosts 1 - 127 but allow hosts .24 to .30 access to the upper half of unsubnetted lan destination ie. hosts .128 to .255?

Comments

  • EdTheLadEdTheLad Member Posts: 2,111 ■■■■□□□□□□
    Why not do
    access-list 101 deny ip x.x.x.16 0.0.0.7 x.x.x.0 0.0.0.127
    access-list 101 permit ip any any
    Networking, sometimes i love it, mostly i hate it.Its all about the $$$$
Sign In or Register to comment.