Network and Broadcast address in crypto ACL

[francisco del cura ferreira]

Hi all:

I have a ACL applied to a crypto map in ASA:

access-list VPN extended permit ip host 10.10.10.10 192.168.123.32 255.255.255.240

The IP 192.168.123.32 is interpreted like the network address by the ASA or not?, I mean, 10.10.10.10 could reach the 192.168.123.32?

Many Thanks

[andrew.prince]

No - the range you have configured:-

.32 - Subnet ID

.33 - First available address

.46 - Last available address

.47 - broadcast IP

If you wanted to have a machine with the IP of .32 - you need to change your subnetting.