06-02-2014 08:10 AM - edited 03-07-2019 07:36 PM
I have been trying to get the syntax right to allow certain outbound traffic based on subnets. the first two lines are fine but I can't get the third and fourth line to take. What is the correct way to do this?
ip access-list extended TEST
permit ip any host x.x.x.x
permit ip any host x.x.x.x
permit ip any host 65.54.54.128 0.0.0.31
permit ip any host 65.55.127.0 0.0.0.255
Thank you,
Solved! Go to Solution.
06-02-2014 09:39 AM
Just remove the host keyword
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
permit ip any 65.54.54.128 0.0.0.127
permit ip any 65.55.127.0 0.0.0.255
permit ip any 65.55.121.128 0.0.0.63
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
Rolando Valenzuela
06-02-2014 08:43 AM
Hello
permit ip any host 65.54.54.128 0.0.0.31
permit ip any host 65.55.127.0 0.0.0.255
this is not valid as you already using the keyword host and then using wild card mask . we use wild card mask if we need a range .
permit ip any host 65.54.54.128 this means permit ip any 65.54.54.128 0.0.0.0
so instead of writing 0.0.0.0 we use keyword host
hope I understood your question correctly
regards,
06-02-2014 09:04 AM
Not exactly.
I need to permit or deny these ranges only:
65.54.54.128/25 65.55.121.128/27 65.55.127.0/24
What is the syntax?
06-02-2014 09:39 AM
Just remove the host keyword
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
permit ip any 65.54.54.128 0.0.0.127
permit ip any 65.55.127.0 0.0.0.255
permit ip any 65.55.121.128 0.0.0.63
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
Rolando Valenzuela
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide