ACL

Answered Question
Feb 1st, 2007

Can you create a ONE LINE ACL that permits the range 10.0.0.0 - 10.192.255.255 or would you have to do it in separate statements?

I have this problem too.
0 votes
Correct Answer by franklaszlo about 9 years 7 months ago

Hello,

no, it is not possible. If you write it down as binary :

10.0.0.0 00001010.00000000.00000000.00000000

10.192.255.254 00001010.11000000.11111111.11111110

you can reveal, that the only common part what can be masked is the first octet, that is, with one mask you can specify only the whole class A 10.0.0.0 address range.

Laszlo

Correct Answer by mathijsbuza about 9 years 7 months ago

I am not sure, but I think you have to do it with multiple statements:

10.0.0.1 255.128.0.0 (0 - 127)

10.128.0.1 255.192.0.0 (128 - 191)

10.192.0.1 255.255.255.0 (192)

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
mathijsbuza Fri, 02/02/2007 - 00:54

I am not sure, but I think you have to do it with multiple statements:

10.0.0.1 255.128.0.0 (0 - 127)

10.128.0.1 255.192.0.0 (128 - 191)

10.192.0.1 255.255.255.0 (192)

Correct Answer
franklaszlo Fri, 02/02/2007 - 01:56

Hello,

no, it is not possible. If you write it down as binary :

10.0.0.0 00001010.00000000.00000000.00000000

10.192.255.254 00001010.11000000.11111111.11111110

you can reveal, that the only common part what can be masked is the first octet, that is, with one mask you can specify only the whole class A 10.0.0.0 address range.

Laszlo

Actions

This Discussion