smarter way to use ACL entries

[vos123]

Hello,

I'm building a new ACL for a streaming server. And this look like this:

600 permit tcp any host 10.10.10.10 eq 8052

610 permit tcp any host 10.10.10.10 eq 8054

620 permit tcp any host 10.10.10.10 eq 8056

630 permit tcp any host 10.10.10.10 eq 8058

640 permit tcp any host 10.10.10.10 eq 8060

650 permit tcp any host 10.10.10.10 eq 8062

Is there a smart way to use all even entries in a range command ? That reduces 49 ACL rules for me.

Greetings

Jeroen

[a.kiprawih]

Hi,

You can use ACL with range if the port is in sequence. But it looks like you only allowed even port no.

Just for info, below is the example of ACL with port range. But this might not meet your requirement because it will allow all even & odd ports in the range between 8052 to 8062:

access-list 100 permit tcp any host 10.10.10.10 range 8052 8062

Cheers!

AK

[vos123]

Hi,

Yes, I only need the even ports of the range commando. Maybe there is another trick for this.

greetings

Jeroen

[RichardSW]

I know that you can do some tricky things with IP addresses and the wildcards to get odd or even IPs, but I don't think you can do that with ports. At the very least I think you can consolidate your current list to one line:

600 permit tcp any host 10.10.10.10 eq 8052 8054 8056 8058 8060 8062