acl question

Sep 06, 2006 7 Replies

who can tell what range of addresses this acl would block?



deny tcp 192.168.96.0 0.0.15.255 any eq smtp


all of them due to the implicit deny at the end.

if you're really wondering about the address range for the 192.168.96.0/20 network...then:

network ID: 192.168.96.0 255.255.240.0 broadcast ID: 192.168.111.255 host range: 192.168.96.1 - 192.168.111.254

you have to include 192.168.111.255 as the question asked what addresses the acl rule would block and as we don't know that there is any such

192.168.96.0/20 network "192.168.111.255 could well be a host address ... not necessarily a broadcast address.

BernieM

this would check for 192.168.96.0 to 192.168.111.255

i think :)

Gordon.

as stated in the original post , that "acl" (aka access control list, NOT access control entry) blocks EVERYTHING because of the implicit deny.

Yes I know that but I was correcting our exclusion of 192.168.111.255 in the acl 'entry'.

BernieM

Yes I know that but I was correcting your exclusion of 192.168.111.255 in the acl 'entry'.

BernieM

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required