forgot how to wildcard-arrgh!

Aug 09, 2006 1 Replies

Say I have a need to only allow a specific range of ip's to access a vlan on my 6509 and any others get denied. what would my mask look like for this example?:



I want the subnet range of 192.13.201.193-222 (255.255.255.224 sub) to access any destination IP and all others denied



ip access-list extended vlan10-in permit ip 192.13.201.192 0.0.0.??? any deny tcp any range 0 65535 any range 0 65535 log deny udp any range 0 65535 any range 0 65535 log deny ip any any log



I would think that 0.0.0.63 would be the wildcard mask, but that would allow 192.13.201.193-255 access, right? I only want the subnet range of 193-223 to have access. How can I do this?



Just do 255 minus the subnet mask to get the wildcard

255 - 224 = 31

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required