ACL problem

[prafuljaded]

I have a 192.168.1.128/27 subnet and want to allow PC Anywhere,http,https ports for IPs 192.168.1.140-144 only. Can it be done in a single ACL entry or I need minimum ACEs to get it done ?

Thanx,

Praful

[amit-singh]

Hi Praful,

You already have a subnetted address. You should use the minimum ACE to allow the access for your IP's.

regards,

-amit singh

[Kevin Dorrell]

'fraid you are going to have to use quite a few lines for this - probably six (2*3).

You will have to define lines for each protocol. HTTP is rendered as www in acl-speak, and HTTP is port tcp/443. Not sure which port "PC Anywhere" uses.

Then, for that range of addresses - 5 hosts -, you will have to have two lines for each protocol, i.e. one for 192.168.1.140 0.0.0.3 and one for the single host 192.168.1.144 0.0.0.0.

Kevin Dorrell

Luxembourg

[prafuljaded]

Thanx guys...The default ports for pcAnywhere are 5631 (TCP) and 5632 (UDP). Sounds like a plan...