acl mask

[petercinvest]

In my switch int vlan 1000,

I have ip access-group 10 in.

I wrote ac 10 permit 0.0.0.0

ac 10 permit 192.168.1.0

do I need to add mask? i.e ac 10 permit 192.168.1.0 0.0.0.255? thanks

[chrihussey]

Without specifying a mask, the ACL will consider the entry as a host and it will apply to just that IP.

Also not sure why you use the 0.0.0.0.