topic Hi, let say that you will in Network Security https://community.cisco.com/t5/network-security/how-to-block-only-the-first-ip-of-each-subnet-using-acl-wildcard/m-p/2866582#M912384 <P>Hi, let say that you will have subnets:<BR />192.168.0.0/24<BR />192.168.1.0/24<BR />192.168.2.0/24<BR />192.168.3.0/24<BR />...<BR />192.168.255.0/24<BR /><BR />and you want to block only this source IP address in each subnet: 192.168.x.1</P> <P></P> <P>standard ACL:<BR />deny 192.168.0.1 0.0.255.0<BR />permit any<BR /><BR />extended ACL:&nbsp;<BR />deny ip 192.168.0.1 0.0.255.0 any<BR />permit ip any any</P> Fri, 03 Jun 2016 06:11:21 GMT Milos Megis 2016-06-03T06:11:21Z how to block only the first IP of each subnet using acl /wildcard mask https://community.cisco.com/t5/network-security/how-to-block-only-the-first-ip-of-each-subnet-using-acl-wildcard/m-p/2866581#M912382 <P style="margin: 0in 0in 0pt;"><SPAN style="color: #1f497d;"><FONT face="Calibri">How can we block only the first IP of each subnet?</FONT></SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="color: #1f497d;"><FONT face="Calibri">I like to avoid coming up with gigantic long ACLs to individually put in explicit deny for each host.</FONT></SPAN></P> <P><FONT color="#000000" face="Times New Roman"> </FONT></P> Fri, 21 Feb 2020 13:50:00 GMT https://community.cisco.com/t5/network-security/how-to-block-only-the-first-ip-of-each-subnet-using-acl-wildcard/m-p/2866581#M912382 moisesebastien1 2020-02-21T13:50:00Z Hi, let say that you will https://community.cisco.com/t5/network-security/how-to-block-only-the-first-ip-of-each-subnet-using-acl-wildcard/m-p/2866582#M912384 <P>Hi, let say that you will have subnets:<BR />192.168.0.0/24<BR />192.168.1.0/24<BR />192.168.2.0/24<BR />192.168.3.0/24<BR />...<BR />192.168.255.0/24<BR /><BR />and you want to block only this source IP address in each subnet: 192.168.x.1</P> <P></P> <P>standard ACL:<BR />deny 192.168.0.1 0.0.255.0<BR />permit any<BR /><BR />extended ACL:&nbsp;<BR />deny ip 192.168.0.1 0.0.255.0 any<BR />permit ip any any</P> Fri, 03 Jun 2016 06:11:21 GMT https://community.cisco.com/t5/network-security/how-to-block-only-the-first-ip-of-each-subnet-using-acl-wildcard/m-p/2866582#M912384 Milos Megis 2016-06-03T06:11:21Z