william.culver@sarasotagov.com
I have several locations which I would like to create ACL and route statements for. Each location has multiple subnets for example, with a range from 10.20.x.x - 10.29.x.x. (Specific subnets isolate various types of traffic, etc.) Each location is identified by the third octet, so for example, location 1 has the above subnets with a range of 10.20.60.x - 10.29.69.x. Each subnet can be anything from a /16 to /30. I would like some input on creating statements which allow me to route traffic and create ACLs efficiently between sites without having numerous statements so that I could for example, have one statement that sends all of the subnets for a specific location to a specific IP. This is all utilizing layer 3 switches. If changing my ranges to groups of 8 (or some other multiple of 2) instead of 10 makes it easier, including for example, using 10.16.56.x - 10.23.63.x in the above case, it is early enough that I could modify my plans. If you have any suggestions, please reply ASAP.
Wiliam
If you want to minimize the statements then yes, it would be better to make sure you can summarise that set of networks with one single statement so you need to use multiples of 2 but you also need to make sure you are on a subnet boundary ie.
10.20.60.x -> 10.20.68.x could not be summarised with one statement.
However if you wanted 8 subnets for a site and you wanted to summarise with one statement then -
10.20.56.0 255.255.248.0 would cover 10.20.56.0 to 10.20.63.255 which gives you 8 subnets to use.
Now you say it could be anything from a /16 to a /30 but that's not entirely clear because you then go onto to say that each site would use the 3rd octet. So i'm still not entirely sure exactly what you want.
Jon
