cisco pix default netmask

There is no netmask with names. The name command substitutes the IP address with a name regardless of the context, the address is used.

It doesn't, you still need to specify it. test-network 255.0.0.0 would be 10.X.X.X test-network 255.255.0.0 would be 10.1.X.X test-network 255.255.255.0 would be 10.1.0.X test-network 255.255.255.255 would be host 10.1.0.0

Hi!

Thanks for the reply.

Yes, I understand this is like an alias. However, if I use test-network in an acl, like this:

access-list inside_access_in permit tcp test-network any eq ssh

How will the firewall interpret the 'test-network' object in this case:

1. 10.1.0.0/16
2. 10.1.0.0/24
3. Some other way(?)

Lutz D> > name 10.1.0.0 test-network

Thanks!

I got it now. Tried to use it without netmask and got an error.

Dilemma solved!

Brian V wrote:

The response will be Illegal command: access-list inside_access_in permit tcp 10.1.0.0 any eq ssh ^ If you want to do this right, please use:

name 10.1.0.0 test-network name 255.255.255.248 slash-29 access-list inside_access permit tcp test-network slash-29 any eq ssh