access-list question (sorted thanks guys)

icejam · April 2009

Hi guys, do we HAVE to use the subnet number (in this case 192.168.80.32) as the address parameter, ie:

is

access-list 1 permit 192.168.80.32 0.0.0.31

same as

access-list 1 permit 192.168.80.33 0.0.0.31

or

access-list 1 permit 192.168.80.34 0.0.0.31

etc...?

since they fall in the same subnet?

bugsy · April 2009

Hi,

The two last examples will automatically change to the correct network address (192.168.80.32) without giving you any kind of error message. You can verify this by using the show access-list command to view the access list after you've created it. So yes, it will be the same.

gw2(config)#access-list 40 permit 192.168.80.34 0.0.0.31
gw2(config)#do show access-list 40
Standard IP access list 40
    10 permit 192.168.80.32, wildcard bits 0.0.0.31

access-list question (sorted thanks guys)

Comments