CISCO access-list [ host range ]

fritz001 · 06-28-2009, 11:21 PM

It might not be a question directly related to linux... but anyway

there is any way i can define a host range:: ?

access-list 101 permit tcp host range 192.168.50.100-192.168.50.121 192.168.100.2 eq 80 443 25 995 587

jimbo1954 · 07-10-2009, 09:56 AM

There is a range syntax, which uses wild-cards rather than net masks. If you want to see how it should be done *almost* interactively, go to

http://www.chud.net/acl-maker.html

and input your requirements and the acl is generated automagically

HTH

fritz001 · 07-11-2009, 11:34 AM

Quote:

Originally Posted by jimbo1954

There is a range syntax, which uses wild-cards rather than net masks. If you want to see how it should be done *almost* interactively, go to

http://www.chud.net/acl-maker.html

and input your requirements and the acl is generated automagically

HTH

Link isn't working....

baldy3105 · 07-14-2009, 03:38 PM

No. but its not that hard -

permit tcp 192.168.50.100 0.0.0.3 192.168.100.2 eq 80 443 25 995 587
permit tcp 192.168.50.104 0.0.0.7 192.168.100.2 eq 80 443 25 995 587
permit tcp 192.168.50.112 0.0.0.7 192.168.100.2 eq 80 443 25 995 587
permit tcp 192.168.50.120 0.0.0.1 192.168.100.2 eq 80 443 25 995 587