cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
433
Views
0
Helpful
4
Replies

How do block a range of ip's via PDM on PIX 501

jwbutler123
Level 1
Level 1

I need to block a range of ip's, 123.8.0.0 to 123.15.255.255. How do I do that?

1 Accepted Solution

Accepted Solutions

That's correct. And I made a mistake because the PIX doesn't use inverted masks, so it would be:

123.8.0.0 255.248.0.0

John

HTH, John *** Please rate all useful posts ***

View solution in original post

4 Replies 4

John Blakley
VIP Alumni
VIP Alumni

You can create an acl like:

access-list BLOCKED deny ip 123.8.0.0 0.7.255.255 any

This will cover you from 123.8.0.1 - 123.15.255.254.

HTH,

John

HTH, John *** Please rate all useful posts ***

If i'm using the PDM I assume 123.8.0.0 would be the ip and 0.7.255.255 would be the mask. Is my assumption correct?

That's correct. And I made a mistake because the PIX doesn't use inverted masks, so it would be:

123.8.0.0 255.248.0.0

John

HTH, John *** Please rate all useful posts ***

handsy
Level 1
Level 1

If, as per your subject, you want to do this via PDM, then you need to go to:

Configuration>Access Rules>Access Rules>Add

Looks like this screen:

http://www.netcraftsmen.net/welcher/papers/pdm-fig02.jpg

Then just add a rule as per the previous poster's reply.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card