Access-list port range question

[Nachiappan Nachiappan]

Hi,

I would like to clarify the exact operation of the below command:

ip access-list extended VoiceACL

permit udp any any range 16384 16387

Thus the range statement in the above access list specify that it allow only three ports "16384 to 16387". Is that correct ? Bit confused with this command. One of my friend said that the range statement not just specify 3 ports,but it specify the starting port as 16384 and the end port number 32771 [16384+16387].

Value1] = starting port number

[Value2] + [Value1] = end port number

Thanks

Nachi

[Raphael Wouters · Accepted solution]

Hi Nachi,

This represent the ports ranging between the first number and the last number included, in your case this is actually 4 ports: 16384, 16385, 16386 and 16387

Regards,

Raphael