Access-List

[tsouza]

Can I have a range of IP addresses for a single port in a access-list instead if inputting each one. If I can how do I do it.

Thanks

[steve.barlow]

If I understand you correctly, yes. For example:

access-list 101 permit udp host 147.150.213.94 194.72.6.64 0.0.0.15 eq dns

access-list 101 permit udp 194.73.74.0 0.0.0.255 host 194.72.6.205 eq syslog

See links: http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_5_4/msfc/acc_list.htm

and (chapter 7)

http://www.crackinguniversity2000.it/NetworkingCISCO/cisco014---Cisco.Security.Architectures/ewtoc.html

Hope it helps.

Steve