Permit TCP Traffc

[f.medinaa]

Hello everyone

I have this problem

How do you permit the tcp traffic of all hosts of the network 172.16.0.0/24 towards the "pair" hosts that are within the first 55 hosts of the network 10.0.0.0/24.
 It has to be pair hosts (10.0.0.2  10.0.0.4 10.0.0.6) not (10.0.0.3 10.0.0.5 10.0.0.7)
Sorry if I didn´t make my self clear. LOL.

[Martin L]

Interesting .... and maybe tricky. 

I know wildcard 254 with even number of IP in that octet will do even numbers while odd numbering that octet will do odd numbers.

172.16.0.0 0.0.0.254 will select all even numbers (0,2,4,6,8.etc but it does not stop at 55)

but how to stop at 55?

Regards, ML
**Please Rate All Helpful Responses **

[Joseph W. Doherty]

You're looking for an ACL that doesn't use an ACE for each host?

[Martin L]

nope,  found partial answer . .. I think it is 172.16.0.0  wildcard 0.0.0.54

so access-list 111 permit tcp 172.16.0.0   0.0.0.54  any

that gives you 0, 2, 4, 6, missing some here , 16, 18, 20, 22, missing, 32, 34, 36, 38, 48, 50, 52, 54

then i guess add those "missing even" numbers

Regards, ML
**Please Rate All Helpful Responses **

[Martin L]

here is how to fill those "missing" IPs
172.16.0.8 0.0.0.2 will give you IPs 8 and 10.
172.16.0.12 0.0.0.2 will give u 12,14
172.16.0.24 0.0.0.2 for 24, 26
and so on , so your list will have several entries.

[Joseph W. Doherty]

How about a mask of 0.0.0.62 (than your .54)? I.e. just keep the last binary bit a zero, set the rest of the mask to encompass the larger block.

[Martin L]

that could work; Wildcard 0.0.0.62 will match all even numbers from 0 to 62. so, u must block 56 thru 62.

[kamalprasaddhakal]

 I’m designing and configuring a DMZ network and I want to configure a radius-based authentication for all users on their respective VLANs so that they can access there related file servers when authenticated.
Any idea of How do I go about this as I cannot find any information online???

[Martin L]

Please create brand new topic with your question.