forgot how to wildcard-arrgh!

Say I have a need to only allow a specific range of ip's to access a vlan on my 6509 and any others get denied. what would my mask look like for this example?:

I want the subnet range of 192.13.201.193-222 (255.255.255.224 sub) to access any destination IP and all others denied

ip access-list extended vlan10-in permit ip 192.13.201.192 0.0.0.??? any deny tcp any range 0 65535 any range 0 65535 log deny udp any range 0 65535 any range 0 65535 log deny ip any any log

I would think that 0.0.0.63 would be the wildcard mask, but that would allow 192.13.201.193-255 access, right? I only want the subnet range of 193-223 to have access. How can I do this?

Reply to
05hammer
Loading thread data ...

Just do 255 minus the subnet mask to get the wildcard

255 - 224 = 31

Reply to
mcaissie

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.