Access-Lists

[charlieb_j]

Is it possible to configure a line in an access list to open a series of ports as opposed to adding a line for each port number?  Could I be able to, in one line, allow for example ports "1-10"?

[Somanna M.P]

Hi Charlie,

     You can configure a range of ports to be allowed on an access-list by using the Obect group feature.You need to define the range of ports in an Object-group :

Eg:

(config)#object-group service high_ports tcp
(config-service)#port-object range 1024 65535
(config-service)#exit 

Once you define the Obect group you can call this object group on the Accesslist:

access-list abc permit tcp any any object-group

-Somanna M P