cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
435
Views
0
Helpful
4
Replies

How do block a range of ip's via PDM on PIX 501

jwbutler123
Level 1
Level 1

I need to block a range of ip's, 123.8.0.0 to 123.15.255.255. How do I do that?

1 Accepted Solution

Accepted Solutions

That's correct. And I made a mistake because the PIX doesn't use inverted masks, so it would be:

123.8.0.0 255.248.0.0

John

HTH, John *** Please rate all useful posts ***

View solution in original post

4 Replies 4

John Blakley
VIP Alumni
VIP Alumni

You can create an acl like:

access-list BLOCKED deny ip 123.8.0.0 0.7.255.255 any

This will cover you from 123.8.0.1 - 123.15.255.254.

HTH,

John

HTH, John *** Please rate all useful posts ***

If i'm using the PDM I assume 123.8.0.0 would be the ip and 0.7.255.255 would be the mask. Is my assumption correct?

That's correct. And I made a mistake because the PIX doesn't use inverted masks, so it would be:

123.8.0.0 255.248.0.0

John

HTH, John *** Please rate all useful posts ***

handsy
Level 1
Level 1

If, as per your subject, you want to do this via PDM, then you need to go to:

Configuration>Access Rules>Access Rules>Add

Looks like this screen:

http://www.netcraftsmen.net/welcher/papers/pdm-fig02.jpg

Then just add a rule as per the previous poster's reply.

Review Cisco Networking products for a $25 gift card