Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

gone ACL brain-dead

I need to create an ACL that will allow in & outbound traffic between 10.34.44.62-126 and 10.35.44.192-254.

this ACL is going in a 3750.

Any ideas?

2 REPLIES
Green

Re: gone ACL brain-dead

Something like this, break the ip's into subnets so you don't have too many ace's. So that would be...

10.34.44.62

10.34.44.63

10.34.44.64/26

and

10.35.44.192/25

access-list 100 permit ip host 10.34.44.62 10.35.44.192 0.0.0.127

access-list 100 permit ip host 10.34.44.63 10.35.44.192 0.0.0.127

access-list 100 permit ip 10.34.44.64 0.0.0.63 10.35.44.192 0.0.0.127

access-list 101 permit ip 10.35.44.192 0.0.0.127 host 10.34.44.62

access-list 101 permit ip 10.35.44.192 0.0.0.127 host 10.34.44.63

access-list 101 permit ip 10.35.44.192 0.0.0.127 10.34.44.64 0.0.0.63

int vlan 34

ip access-group 100 in

int vlan 35

ip access-group 101 in

I don't know what your vlans are but that should give you a good idea.

Community Member

Re: gone ACL brain-dead

Thanks, I'll give them a shot. Gary

93
Views
5
Helpful
2
Replies
CreatePlease to create content