ACL - question

[Ritter Rs]

Hi,

Could anyone explain me this lines in ACL:

... 

 permit tcp 10.10.1.0 0.0.0.255 any range 22 telnet
 permit tcp 10.30.1.0 0.0.0.255 any range 22 telnet
 permit tcp 10.30.2.0 0.0.0.255 any range 22 telnet
 deny   ip any any log

...

line vty 0 4
 access-class telnet-acl in

I don't understand this part "range 22 telnet"

What does it mean?

Telnet port is 23.

SSH port is 22.

Thank you.

[Jon Marshall · Accepted solution]

The range options allows a range of ports so it just allows you to have one line in your acl per IP subnet and include both ports in that line.

Otherwise you would need two lines per subnet, one for each port.

Jon

[Ritter Rs]

Ah

I've got it. Thank you.

I have that in some configuration where I have only telnet access allowed, and I was somehow confused with 22... I had a long day today. 

Thanks again.