cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
328
Views
0
Helpful
1
Replies

Access-Lists

charlieb_j
Level 1
Level 1

Is it possible to configure a line in an access list to open a series of ports as opposed to adding a line for each port number?  Could I be able to, in one line, allow for example ports "1-10"?

1 Reply 1

Somanna M.P
Cisco Employee
Cisco Employee

Hi Charlie,

     You can configure a range of ports to be allowed on an access-list by using the Obect group feature.You need to define the range of ports in an Object-group :

Eg:

(config)#object-group service high_ports tcp
(config-service)#port-object range 1024 65535
(config-service)#exit 

Once you define the Obect group you can call this object group on the Accesslist:

access-list abc permit tcp any any object-group

-Somanna M P

Review Cisco Networking for a $25 gift card