03-13-2018 07:05 AM - edited 02-21-2020 07:30 AM
Hi,
Is there any way to perform this with regex?
- We have to allow http access to hosts .175 and .176 of 10.18.[0->254].0/24 10.19.[0->254].0/24 and 10.20.[0->254].0/24.
Any clue?.
Thanks in advance!.
Javier.
03-13-2018 07:57 AM
Hi Javier,
It would be a nice feature, but regex on the ASA only supports URL filtering.
What you are after can be achieved with extended ACLs and object-groups. Just to be clear you want hosts with IP addresses ending .175 and .176 in every /24 subnet belonging to the three /16 subnets specified to be accessible on TCP/80 and TCP/443?
ie:
10.18.0.175
10.18.0.176
10.18.1.175
10.18.1.175
...
10.18.254.175
10.18.254.176
cheers,
Seb.
03-13-2018 08:10 AM
Hi Seb,
First of all, thanks for your nice answer!. That's correct, the access rule must allow http/https traffic for .175 and .176 hosts of every /24 subnet that belongs to the three /16 subnets.
ie.
10.18.0.175 to 10.18.254.175 - 10.18.0.176 to 10.18.254.176
10.19.0.175 to 10.19.254.175 - 10.19.0.176 to 10.19.254.176
10.20.0.175 to 10.20.254.175 - 10.20.0.176 to 10.20.254.176
Regards!
Javier.
03-13-2018 08:36 AM
03-13-2018 08:37 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide