RFC1918 - ACL error message

[dgalati000]

Attempting to install an ACL on my inside of PIX to deny these RFC1918 (10., 172.16., and 192.168.)addresses from eminating from the inside.

Getting this error msg in my console prompt, and have never seen it before.

ERROR:IP address,mask (10.0.0.0,0.255.255.255) doesn't pair.

PIX 525 running vers 7.2

[srue · Accepted solution]

use normal masks - not reverse masks in pix/asa OS.

[dgalati000]

Thanks, one of the security guys here says the same thing. I was going to try netmasks instead of inverse masks but didn;t...all the doc said to stay with inv masks...thx.