subnetting question

[CSCO10662744_2]

I've got a subnet: 172.16.32.0 /20

I want to allow only hosts from that network (172.16.32.0-172.16.47.0) to access my switch.

So I have an ACL:

access-list 101 permit ip 172.16.32.0 0.0.16.255 host 172.16.33.101 (ip of switch).

For some reason, the ACL doesn't work. If I use the 0.0.0.255 mask however, it works fine.

So apparently I may have got the mask in the ACL wrong.

Could someone please tell me what mask I should've used??

Thanks.

[Harold Ritter]

Wildmask bits have to be contiguous.Try the following ACL statement instead:

access-list 101 permit ip 172.16.32.0 0.0.15.255 host 172.16.33.101

Hope this helps,

[CSCO10662744_2]

Thank you.

Not sure how I totally forgot about that...maybe I should retake subnetting 101.