Unanswered Question
May 1st, 2007
User Badges:

If I need to give access to a class b network in an acl/static statement would the following statement work...

access-list acl_out permit tcp host host my.outside.ip eq ssh

static (inside,outside) tcp my.outside.ip ssh my.inside.ip ssh netmask 0 0

I've used this configuration before when I had the single IP address but when it is a whole class b I wasn't sure if the would work.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
acomiskey Tue, 05/01/2007 - 09:58
User Badges:
  • Green, 3000 points or more

access-list acl_out permit tcp x.x.0.0 host my.outside.ip eq ssh

When doing networks, do not use keyword "host", that host keyword is same as mask


This Discussion