topic Re: How do block a range of ip's via PDM on PIX 501 in Network Security

How do block a range of ip's via PDM on PIX 501

jwbutler123 — Mon, 11 Mar 2019 15:31:07 GMT

I need to block a range of ip's, 123.8.0.0 to 123.15.255.255. How do I do that?

John Blakley — Tue, 12 May 2009 17:46:50 GMT

You can create an acl like:

access-list BLOCKED deny ip 123.8.0.0 0.7.255.255 any

This will cover you from 123.8.0.1 - 123.15.255.254.

HTH,

John

handsy — Tue, 12 May 2009 18:18:55 GMT

If, as per your subject, you want to do this via PDM, then you need to go to:

Configuration>Access Rules>Access Rules>Add

Looks like this screen:

Then just add a rule as per the previous poster's reply.

jwbutler123 — Tue, 12 May 2009 19:23:22 GMT

If i'm using the PDM I assume 123.8.0.0 would be the ip and 0.7.255.255 would be the mask. Is my assumption correct?

John Blakley — Tue, 12 May 2009 19:25:50 GMT

That's correct. And I made a mistake because the PIX doesn't use inverted masks, so it would be:

123.8.0.0 255.248.0.0

John